Loading
Free for every learner
Hands-on challenges and investigation missions in your browser, an AI mentor that helps you get unstuck without handing over the answer, and a Skill Passport that backs every skill with evidence.
Recon
Capture-the-flag challenges in web, crypto, forensics and more. Each one ships with a scope statement, so you only ever attack what you are allowed to.
Explore the libraryThe trail
Filter thousands of log lines, pin what matters, build a timeline and report what happened. Graded on the server against a hidden answer key.
Sensei
Ask for a nudge, then the next step. The mentor never sees the flag, so it cannot leak it.
The vault
Answers are stored as salted hashes and checked inside the database. Your browser, the mentor and other learners never see them, so every score is earned.
Intercepted string
RXZlcnkgZXhwZXJ0IHdhcyBvbmNlIGEgYmVnaW5uZXI=
Rank
Every skill links to the solve that proves it, on one public page you control.
Start freeInside the platform
Every part of CyCom is something you do, not something you watch.
Filter thousands of log lines, pin what matters, build a timeline and report what happened. Graded on the server against a hidden answer key.
Built like a security product
Answers are stored as salted hashes and checked inside the database.
It works from the brief and your progress. The flag is not in its context.
For departments
Create cohorts, invite students with a link, set assignments with deadlines and export reports that separate verified work from self-reported work.
Open the consoleQuestions
Yes, for every learner. Departments pay for the console that runs cohorts and reports.
No. We run the mentor, so there is nothing to set up.
Pick the Getting Started path. Your first challenge opens straight away, and the mentor gives hints if you get stuck.
Create a free account and start the Getting Started path today.
Timeline
02:14:00
First compromise
02:14:37
Pinned
02:19:48
Pinned
Ask for a nudge, then the next step. The mentor never sees the flag, so it cannot leak it.
Write a rule, run it against a hidden labelled dataset and see your true and false positives.
Every skill links to the solve that proves it, on one public page you control.
Look up a CVE, decode a payload or hash a string without leaving the tab.
Solves, XP, streaks and skill evidence are written by the database or the grader, never by your browser.
Your profile is private until you choose otherwise, and passports of learners under 15 are never public.
No. Every challenge is a self-contained exercise with a scope statement. Testing systems you are not authorised to test is illegal, and we never point you at one.
English, Hindi and Hinglish. Switch any time from the top bar.