Sponsored by
Supported by
Event Type
Defensive Capture The Flag
Duration
5 Days
Region
Global
Entry Fee
Free
Prize Pool
$7,000
Team Size
1 - 5 Players
Difficulty
Easy to Insane
CTF Style
Jeopardy
17-21 Sep, 2026
Watson vanishes. Holmes returns. Mycroft opens DIOGENES. Inside it, Moriarty begins teaching truth to move.
Step into the boots of blue team defenders in our signature defensive CTF event of the year. Over five days of real-world forensic, detection, and investigation challenges, you and your team will untangle. Assemble up to 5 players, analyze the evidence, and expose APT NAPOLEON before the truth gets rewritten.
Why You Should Join
TL;DR: For the defensive practice, the investigation thrill, the prizes, and the prestige.
Realistic blue team scenarios. Investigate memory dumps, network traffic, malware samples, and compromised cloud assets built by the HTB content team.
Master threat hunting. Go beyond basic alerts to catch APT NAPOLEON manipulating trusted detection paths inside government-level systems.
Defensive community hype. Collaborate and exchange tactical ideas with thousands of defenders in our official Discord channel.
Guaranteed prizes. Every participant who registers and solves at least one Challenge gets an exclusive 10% discount code valid for VIP+ Annual subscription.
Certificate of completion. Earn more than 200 points to claim your official certificate of attendance and prove your defensive prowess.

More than 40 challenges to take on.
Click to edit the content.
Web
5 Challenges
Reversing
5 Challenges
Pwn
5 Challenges
Forensics
5 Challenges
Crypto
5 Challenges
Blockchain
5 Challenges
Hardware
3 Challenges
Machines
5 Challenges
Cloud
5 Challenges
Misc
3 Challenges
ICS
3 Challenges
Coding
5 Challenges
The Reichenbach Directive
The Story: Operation DIOGENES
What starts as a private extortion case quickly pulls defenders into a modern London cyber-thriller. When Dr. John Watson disappears while tracking blackmail patterns, his encrypted dead man switch activates. Sherlock Holmes steps out of retirement, while Mycroft Holmes is forced to reveal DIOGENES.
"Organizations looking to engage cybersecurity talent and prepare them for an agentic future through gamified, challenge-based learning will find Hack The Box a strong fit."
In The Forrester Wave™ Cybersecurity Skills And Training Platforms, Q1 2026, Hack The Box scored 5 out of 5 in 13 criteria.
5/5 - Agentic AI Readiness
5/5 - Learner Experience and Adoption
5/5 - Gamification, Competition, and Recognition
5/5 - Training Assignment and Curriculum
5/5 - Security Framework Mapping and Alignment
5/5 - Talent Ecosystem Integration
5/5 - Security and Risk Ecosystem Integration
5/5 - Accessibility
5/5 - Product Security
5/5 - Vision
5/5 - Innovation
5/5 - Partner Ecosystem
5/5 - Community
The Prizes
This year, we are bringing a haul of rewards for our top-performing teams, outstanding community writers, and those who help us spread the word.
1st Place
Prizes
- Exclusive HTB Defensive Challenge Coins
- VIP+ HTB Labs 1 Year (per player)
- Silver Annual HTB Academy subscription (per player)
- $100 HTB Swagstore Gift Card (per player)
2nd Place
Prizes
- 1220 cubes in HTB Academy (access to the whole SOC Analyst job-role path in HTB Academy) (per player)
- 6-month VIP+ HTB Labs Voucher (per player)
- $50 HTB Swagstore Gift Card (per player)
3rd Place
Prizes
- 600 cubes in HTB Academy (access to the whole SOC Analyst job-role path in HTB Academy) (per player)
- 3-month VIP+ HTB Labs Voucher (per player)
- $25 HTB Swagstore Gift Card (per player)
Giveaways & Special Prizes
The rewards do not stop at the scoreboard.
Best Write-up Award
Did you document your methodology perfectly? The author of the best overall write-up will win a Flipper Zero and a Silver Annual subscription on HTB Academy.
Guaranteed Prize
Solve at least one Challenge during the event to claim a 10% discount on an HTB Labs Annual VIP+ Subscription.
DISCLAIMER: We’ll ship all prizes directly to the winners, but please note that any issues with customs, import fees, or local regulations will be your responsibility. While we’ll do our best to ensure smooth delivery, customs processes can vary by country. We recommend checking your local customs policies ahead of time to avoid surprises. Thank you for understanding, and good luck!
Timeline
Mark your calendar
Registration opens
August 5, 2026
CTF starts
September 17, 2026, 13:00 UTC
CTF ends
September 21, 2026, 13:00 UTC
Rules of Engagement
To keep the investigation fair and competitive for all defenders, please adhere to these guidelines:
✅ Our suggestions
Discord
Join our Discord server and jump into #holmes-ctf-general to connect with fellow defenders and stay updated on event announcements.and jump into #holmes-ctf-general to connect with fellow defenders and stay updated on event announcements.
Official Hashtags
Share your write-ups, progress, and memes using #HolmesCTF2026.
❌ Do Not Do
Do not attack the backend infrastructure of the CTF.
Do not attack other teams playing in the CTF.
Do not brute-force the flag submission form.
Do not exchange flags or write-ups/hints of the challenges with other teams.
Do not violate HTB's Terms of Service.
Do not field a team larger than the 5-player limit, or participate in more than one team.
Do not use AI as a primary solver. AI tools are allowed only as aids; solving a challenge with a single prompt isn't in the spirit of this event.
When does Holmes CTF 2026 start?
The event runs from September 17th to September 21st, 2026, starting at 13:00 UTC. It lasts 5 days (120 hours total).
How many players can be on a team?
You can play solo or build a team of up to 5 players max.
Is this CTF strictly defensive?
Yes. Holmes CTF focuses on defensive security, threat hunting, incident response, digital forensics, malware analysis, and SOC detection engineering.
Is this event beginner-friendly?
Yes! Challenges range from Easy to Insane. Beginners can tackle fundamental forensic and log analysis tasks, while experienced defenders can test their skills against complex APT scenarios.
How do I receive my guaranteed participation prize?
Register for the event and successfully submit at least one valid flag before the CTF ends. Your discount code will be emailed following the conclusion of the event.
What is the policy on using AI tools?
AI is allowed as a supporting tool to aid your thinking. However, using AI as a primary solver (e.g., solving with a single prompt) is prohibited. Event hosts may ask for a walkthrough of your reasoning; if misuse is found, solves may be revoked and scores adjusted.
Truth is moving. Stop the directive.
Moriarty’s quiet operation is already running inside DIOGENES. Gather your team of defenders, prepare your tools, and get ready to expose APT NAPOLEON.
Resources
WEBINARS
AI Security in 2026: Trends, Roles, and Readiness
FROM THE BLOG
The great complexity shift – Why AI agents don’t just simplify cybersecurity
RESEARCH PAPER
Breaking Guardrails, Facing Walls: Insights on Adversarial AI for Defenders & Researchers

