Sponsored by 

banner-logo-awsbanner-logo-intelbanner-logo-puma

Supported by

Event Type

Defensive Capture The Flag

Duration

5 Days

Region

Global

Entry Fee

Free

Prize Pool

$7,000

Team Size

1 - 5 Players

Difficulty

Easy to Insane

CTF Style

Jeopardy

17-21 Sep, 2026

Watson vanishes. Holmes returns. Mycroft opens DIOGENES. Inside it, Moriarty begins teaching truth to move.

Step into the boots of blue team defenders in our signature defensive CTF event of the year. Over five days of real-world forensic, detection, and investigation challenges, you and your team will untangle. Assemble up to 5 players, analyze the evidence, and expose APT NAPOLEON before the truth gets rewritten.

    Why You Should Join

    TL;DR: For the defensive practice, the investigation thrill, the prizes, and the prestige.

    Realistic blue team scenarios. Investigate memory dumps, network traffic, malware samples, and compromised cloud assets built by the HTB content team.

    Master threat hunting. Go beyond basic alerts to catch APT NAPOLEON manipulating trusted detection paths inside government-level systems.

    Defensive community hype. Collaborate and exchange tactical ideas with thousands of defenders in our official Discord channel.

    Guaranteed prizes. Every participant who registers and solves at least one Challenge gets an exclusive 10% discount code valid for VIP+ Annual subscription.

    Certificate of completion. Earn more than 200 points to claim your official certificate of attendance and prove your defensive prowess.

    HTB Cyber Security

    More than 40 challenges to take on.

    Click to edit the content.

    Web

    5 Challenges

    Reversing

    5 Challenges

    Pwn

    5 Challenges

    Forensics

    5 Challenges

    Crypto

    5 Challenges

    Blockchain

    5 Challenges

    Hardware

    3 Challenges

    Machines

    5 Challenges

    Cloud

    5 Challenges

    Misc

    3 Challenges

    ICS

    3 Challenges

    Coding

    5 Challenges

    The Reichenbach Directive

    The Story: Operation DIOGENES

    What starts as a private extortion case quickly pulls defenders into a modern London cyber-thriller. When Dr. John Watson disappears while tracking blackmail patterns, his encrypted dead man switch activates. Sherlock Holmes steps out of retirement, while Mycroft Holmes is forced to reveal DIOGENES.

    "Organizations looking to engage cybersecurity talent and prepare them for an agentic future through gamified, challenge-based learning will find Hack The Box a strong fit."

    In The Forrester Wave™ Cybersecurity Skills And Training Platforms, Q1 2026, Hack The Box scored 5 out of 5 in 13 criteria.

    5/5 - Agentic AI Readiness 

    5/5 - Learner Experience and Adoption 

    5/5 - Gamification, Competition, and Recognition

    5/5 - Training Assignment and Curriculum 

    5/5 - Security Framework Mapping and Alignment

    5/5 - Talent Ecosystem Integration 

    5/5 - Security and Risk Ecosystem Integration 

    5/5 - Accessibility 

    5/5 - Product Security 

    5/5 - Vision 

    5/5 - Innovation

    5/5 - Partner Ecosystem 

    5/5 - Community 

    The Prizes

    This year, we are bringing a haul of rewards for our top-performing teams, outstanding community writers, and those who help us spread the word.

    1st place trophy

    1st Place

    Prizes

    • Exclusive HTB Defensive Challenge Coins
    • VIP+ HTB Labs 1 Year (per player)
    • Silver Annual HTB Academy subscription (per player)
    • $100 HTB Swagstore Gift Card (per player)
    2nd place trophy

    2nd Place

    Prizes

    • 1220 cubes in HTB Academy (access to the whole SOC Analyst job-role path in HTB Academy) (per player)
    • 6-month VIP+ HTB Labs Voucher (per player)
    • $50 HTB Swagstore Gift Card (per player)
    3rd place trophy

    3rd Place

    Prizes

    • 600 cubes in HTB Academy (access to the whole SOC Analyst job-role path in HTB Academy) (per player)
    • 3-month VIP+ HTB Labs Voucher (per player)
    • $25 HTB Swagstore Gift Card (per player)

    Giveaways & Special Prizes

    The rewards do not stop at the scoreboard.

    Best Write-up Award

    Did you document your methodology perfectly? The author of the best overall write-up will win a Flipper Zero and a Silver Annual subscription on HTB Academy.

    Guaranteed Prize

    Solve at least one Challenge during the event to claim a 10% discount on an HTB Labs Annual VIP+ Subscription.

    DISCLAIMER: We’ll ship all prizes directly to the winners, but please note that any issues with customs, import fees, or local regulations will be your responsibility. While we’ll do our best to ensure smooth delivery, customs processes can vary by country. We recommend checking your local customs policies ahead of time to avoid surprises. Thank you for understanding, and good luck!

    Timeline

    Mark your calendar

     
     

    Registration opens

    August 5, 2026

     
     

    CTF starts

    September 17, 2026, 13:00 UTC

     

    CTF ends

    September 21, 2026, 13:00 UTC

    Rules of Engagement

    To keep the investigation fair and competitive for all defenders, please adhere to these guidelines:

    ✅ Our suggestions

    Discord
    Join our Discord server and jump into #holmes-ctf-general to connect with fellow defenders and stay updated on event announcements.and jump into #holmes-ctf-general to connect with fellow defenders and stay updated on event announcements.

     

    Official Hashtags

    Share your write-ups, progress, and memes using #HolmesCTF2026.

    ❌ Do Not Do

    Do not attack the backend infrastructure of the CTF.
    Do not attack other teams playing in the CTF.
    Do not brute-force the flag submission form.
    Do not exchange flags or write-ups/hints of the challenges with other teams.
    Do not violate HTB's Terms of Service.
    Do not field a team larger than the 5-player limit, or participate in more than one team.
    Do not use AI as a primary solver. AI tools are allowed only as aids; solving a challenge with a single prompt isn't in the spirit of this event.

    When does Holmes CTF 2026 start?

    The event runs from September 17th to September 21st, 2026, starting at 13:00 UTC. It lasts 5 days (120 hours total).

    How many players can be on a team?

    You can play solo or build a team of up to 5 players max.

    Is this CTF strictly defensive?

    Yes. Holmes CTF focuses on defensive security, threat hunting, incident response, digital forensics, malware analysis, and SOC detection engineering.

    Is this event beginner-friendly?

    Yes! Challenges range from Easy to Insane. Beginners can tackle fundamental forensic and log analysis tasks, while experienced defenders can test their skills against complex APT scenarios.

    How do I receive my guaranteed participation prize?

    Register for the event and successfully submit at least one valid flag before the CTF ends. Your discount code will be emailed following the conclusion of the event.

    What is the policy on using AI tools?

    AI is allowed as a supporting tool to aid your thinking. However, using AI as a primary solver (e.g., solving with a single prompt) is prohibited. Event hosts may ask for a walkthrough of your reasoning; if misuse is found, solves may be revoked and scores adjusted.

    Truth is moving. Stop the directive.

    Moriarty’s quiet operation is already running inside DIOGENES. Gather your team of defenders, prepare your tools, and get ready to expose APT NAPOLEON.

    Resources

    WEBINARS

    AI Security in 2026: Trends, Roles, and Readiness

    FROM THE BLOG

    The great complexity shift – Why AI agents don’t just simplify cybersecurity

    RESEARCH PAPER

    Breaking Guardrails, Facing Walls: Insights on Adversarial AI for Defenders & Researchers