Black Hat India 2026 Official CTF
28 Nov 2026, 19:30 IST (14:00 UTC)
to 29 Nov 2026, 19:30 IST (14:00 UTC)
Anti-cheat forensics, per-team dynamic flags on isolated labs, INR billing, and a scoreboard that turns into a hiring pipeline.
Trusted by conferences, universities and security teams that run CTFs on CTF7


| Topic | CTF7 | CTFd | Self-hosting |
|---|---|---|---|
| Who runs it | We host every plan, Free included. | CTFd Cloud, or self-host the open-source core. | You run servers, backups and the on-call rota. |
| Billing | Per event in INR. Registration fees via Razorpay, with GST invoices. | USD per month, USD only. | Software is free; infrastructure and time are not. |
| Fair play | Per-team dynamic flags and anti-cheat forensics with incident review. | Dynamic-value scoring; per-team flags need custom work. | Anti-cheat is yours to build. |
| Formats | Jeopardy and Raw Ops (CVSS 4.0) self-serve. | Jeopardy; Raw Ops not offered. | Whatever you set up yourself. |
28 Nov 2026, 19:30 IST (14:00 UTC)
to 29 Nov 2026, 19:30 IST (14:00 UTC)
Register for open events on the CTF7 events page with a free player account. Our practice event, Ouroboros CTF, is launching soon. New to this? Follow the beginner practice roadmap. Ready for a security role? Browse jobs from teams hiring on CTF7.
Most events start with jeopardy. Raw Ops swaps flags for vulnerability reports scored with CVSS 4.0, and hackathons and hiring rounds reuse the same registration and teams. Attack-defense, King of the Hill and SOC simulation need live game infrastructure, so our team scopes and runs them with you.
Web, crypto, pwn, reverse engineering, forensics and OSINT boards with static or dynamic scoring, hints, first-blood bonuses and challenges that unlock on a schedule.
No flags. Players attack a target web app, file vulnerability reports, and your triagers score each valid report with CVSS 4.0. Chaining small bugs into real impact earns a bonus.
Every team gets the same vulnerable services. Patch your own, exploit everyone else's and keep services up through every tick.
Managed event, run by our teamTeams break into shared boxes, write their name into the king file and hold it. Points accrue for every minute held.
Managed event, run by our teamBlue-team rounds: work an alert queue, search the logs, decide what is real and write up the incident.
Managed event, run by our teamChallenge rounds built for one role, such as pentester, AppSec engineer or SOC analyst. You shortlist on solves and report quality.
Team formation, project submissions, mentors, judging rounds and a live leaderboard in one place.
Running a meetup or conference instead? RSVP, ticketing and check-in run on CTF7 too.
CTF7 serves the challenges, files and the live scoreboard. You bring your own terminal, tools and teammates.
player~/double-wrapped❯cat message.txt
UEdTN3tlMGcxM18xZl9hMGdfcmFwZWxjZzEwYX0=
player~/double-wrapped❯base64 -d message.txt
PGS7{e0g13_1f_a0g_rapelcg10a} # looks like ROT13
player~/double-wrapped❯base64 -d message.txt | tr 'A-Za-z' 'N-ZA-Mn-za-m'
CTF7{r0t13_1s_n0t_encrypt10n}
player~/double-wrapped❯Solves, Raw Ops reports and leaderboard movement show up as they happen. From the organizer console you pause a broken challenge, post an announcement to every team and check players in at the venue.


Challenges unlock at the times you set, and the scoreboard can freeze before the finish so the last hour stays tense.
Participation and winner certificates on paid plans, each with its own verification link. Branded designs on Premium.
Bring your own Docker challenge images on Standard, or have our team deploy and run them on Premium.
Your logo and colors on the event page, and the whole event on your own domain.
Container challenges and custom branding start on Standard. Managed containers, branded certificates and your own domain come with Premium.
The same organizer dashboard runs a club practice round on the free tier and the Black Hat India Official CTF. What changes is the plan, the format and how much our team does for you.
IIT Jodhpur, NFSU and MIT-WPU have run events on CTF7. Students attack hosted challenges, so you don't stand up vulnerable machines on campus.
CTF7 for universitiesOWASP chapters, null and independent collectives use CTF7 for monthly challenge rounds and meetups. Nobody in the club has to keep a scoreboard server alive the night before.
CTF7 for communitiesRun an invite-only event in the categories your team works in, then rerun it next quarter and compare scores per category. Our team can write challenges around the stack you run.
CTF7 for enterprisesGive candidates the task the job involves: find the IDOR, triage the alert, write the report. Then move the shortlist through your hiring pipeline on the same platform.
The Black Hat India Official CTF runs on CTF7, and BSides Indore has run its competition here too. Registration, passes and on-site check-in sit on the same platform as the scoreboard.
CTF7 for conferencesA CTF platform runs Capture The Flag competitions: players solve security challenges, each solve reveals a secret string called a flag, such as CTF7{example_flag}, and submitting it scores points on a live scoreboard. CTF7 also handles the event around the board: registration, teams, fees and fair play.
Free is self-serve. Standard is a fixed price, set up with our team in days. Premium is quoted. One-off events need no subscription, and for a season of rounds Organization Starter is ₹999 a month.
A free event for clubs, communities and practice CTFs
For colleges, tech fests and growing teams
For hiring programs, conferences & multi-day events
For learning seats or an organization plan, compare all plans →
A free jeopardy event for up to 50 players goes live when you publish it. For flagship events, our team can build the challenges and run the managed formats: attack-defense, King of the Hill and SOC simulations.