How it works
- Every Monday at 00:00 IST, the platform publishes new case files automatically.
- Each case shows real-looking code, cloud configuration, a pipeline or logs.
- Answer three questions: what's the vulnerability, how severe is it, what's the best fix?
- Earn points, climb the weekly leaderboard and enter the Hall of Fame.
What you'll practise
- OWASP Top 10: SQL injection, XSS, IDOR, SSRF, mass assignment, insecure deserialization.
- Cloud and Kubernetes misconfigurations.
- CI/CD and supply-chain risks.
- Identity flaws such as JWT verification mistakes.
- AI agent risks like indirect prompt injection.
- Patch prioritisation using real exploited CVEs.
Why it's different
It's 100% analysis-based: no live targets, no risk of breaking the law. It builds the exact skill bug bounty hunters and code reviewers use every day: recognising flaws quickly and explaining the fix.
Frequently asked questions
Is it free?
Yes. Easy and medium cases are free every week; expert cases are part of Pro.
Do I need hacking tools?
No. Everything is in your browser. You read the code or config, identify the flaw and choose the fix.