HARDEN
Reduce verified security exposure in a vulnerable or misconfigured environment while keeping required services operational.
Explore Harden ↗Four-person teams move through Harden, Hack, and Hunt. Each track tests a different skill set, and all three contribute to the final ranking.
THREE DIFFERENT SECURITY PERSPECTIVES
CyberShield is one connected team competition made up of three distinct environments. Teams harden a defensive environment, attack a target network, and investigate evidence from a simulated incident.
The environments are designed around related professional skills.
View the preliminary schedule ↗Reduce verified security exposure in a vulnerable or misconfigured environment while keeping required services operational.
Explore Harden ↗Discover attack paths, exploit weaknesses, pivot through a separate target environment, and capture validated objectives.
Explore Hack ↗Analyze evidence, reconstruct activity, identify indicators, and determine what happened during a simulated incident.
Explore Hunt ↗Each track may use a different number of available points. To prevent the largest raw point total from dominating the event, every track result is first converted to a score out of 100. The published track weights are then applied.
This produces one comparable overall score while preserving the intended importance of Harden, Hack, and Hunt.
Complete validated hardening checks, flags, and investigative objectives.
Track points earned ÷ track points available × 100.
Multiply each normalized result by that track’s published percentage.
Add the three weighted results to determine the overall ranking.
(Harden normalized score × Harden weight) + (Hack normalized score × Hack weight) + (Hunt normalized score × Hunt weight)
The final percentage assigned to each track will be published before the competition begins. No percentage shown on an unofficial or earlier document should be treated as final.
Organizers assess the template environment before the challenge. After time expires, each team environment is scanned. Points reflect verified reduction in weighted security weaknesses while required services remain available.
Teams earn points through CTFd for valid flags and required evidence obtained inside the authorized target environment. Higher-value objectives may require deeper access or several connected steps.
Teams earn points through CTFd for correct investigative findings, validated artifacts, and accurate conclusions drawn from the provided incident evidence.
The organizers will publish the final track weights, service checks, evidence requirements, penalties, leaderboard behavior, score-lock process, and tie-break order before competition begins.
FOUR IDENTICAL BUNDLES · SIXTEEN ITEMS
Each of the four highest-ranked teams will receive a CyberShield Team Prize Bundle. Every bundle contains four practical technology items for the team.
The top three teams will also receive training and certification opportunities. Training providers, certification exams, and award conditions will be announced when confirmed.
Compact USB-C charger with cable.
Ethernet, HDMI, power delivery, and USB connectivity.
Rotating aluminum desktop riser.
Compact crossbody bag with secure storage.
17–20 SEPTEMBER · ADDIS ABABA
Questions and rule updates will be shared on Telegram.