· 2026
CAPTURE
THE FLAG
The world's largest cybersecurity competition, hosted within Black Hat Middle East & Africa 2026 in Riyadh. Compete among the world's top cybersecurity talent.
Compete Among the World's Top Cybersecurity Talent
At Black Hat Middle East & Africa 2026 in Riyadh, elite cybersecurity professionals, students, and aspiring researchers take on advanced challenges that test real-world skills in vulnerability discovery, system analysis, and offensive and defensive security.
From the world-renowned CTF Championship to the Junior Bug Bounty Challenge and the Bug Bounty Platform Cup, participants compete at the highest level while showcasing their expertise, innovation, and problem-solving.
The Activities
The Ultimate Cybersecurity
Championship
The flagship competition of Black Hat Middle East & Africa — where the world's elite teams converge to prove their skills.
REGISTER YOUR TEAM →World's Largest CTF Competition
Officially recognized by Guinness World Records.
The Region's Premier Cybersecurity Event
Hosted within Black Hat Middle East & Africa 2026.
Elite Finalists
Only 150 teams earn a place in the live finals from thousands of competitors worldwide.
Grand Prizes
Winner Podium
Local Team Awards
The Competition in Numbers
RIYADH · KINGDOM OF SAUDI ARABIA
Competition Structure
Two stages. One mission. From global online qualifiers to the ultimate on-site showdown in Riyadh.
Online Qualification Round
A 24-hour global competition designed to identify and qualify the top 150 teams for the finals.
Riyadh Finals (On-Site)
A three-day on-site competition featuring progressively advanced cybersecurity challenges across multiple difficulty levels, from beginner to expert.
The Road to the Challenge
Five milestones stand between registration and the winner's podium.
Registration
3 JUN – 29 AUGRegister and join the competition.
Registration Closes
29 AUGFinal deadline for team registration and participation.
Online Qualifiers
29 AUGA 24-hour global competition featuring 15 challenges. Teams compete for a place among the top 150 finalists.
Riyadh Finals (On-Site)
1–3 DECThe Top 150 teams qualify for the Riyadh Finals, featuring 40 on-site challenges over 3 days, with progressive difficulty levels ranging from beginner to expert. Teams consist of 3–5 members.
Champions
3 DECWinners will compete for prizes exceeding 790,000.
Choose Your Challenge
Six categories. Real-world challenges.
Web Exploitation
Break authentication, exploit injection flaws and bypass server-side logic.
System Exploitation (Pwn)
Smash the stack, build ROP chains and gain remote code execution.
Digital Forensics
Carve artifacts from memory dumps, network captures and disk images.
Reverse Engineering
Disassemble binaries and decode the logic hidden inside compiled code.
Cryptography
Crack weak ciphers, exploit broken implementations and recover hidden keys.
AI Systems Hacking
Probe and exploit machine-learning systems, prompts and model pipelines.
The World's Largest CTF Starts Here
Build Your Team. Take the Challenge.
REGISTER NOW →Junior Bug Bounty Challenge 2026
Level Up Your Skills and Make Your Mark in Cybersecurity
A global cybersecurity competition designed for young talents aged 14 to 17, providing participants with hands-on experience in vulnerability discovery and cybersecurity research.
The competition offers opportunities to qualify for major cybersecurity events and rewards outstanding participants with recognition and incentive prizes.
REGISTER AND COMPETE NOW →Bug Bounty Platform Cup 2026
Find Vulnerabilities. Make a Real-World Impact.
A competition that connects organizations with cybersecurity researchers to discover and responsibly report vulnerabilities, helping strengthen digital security through a structured and rewarding framework.
REGISTER NOW →Organized By
Hosted By
