Loading
Loading the LevelUpCTF home page
We're loading this page. If it does not appear, reload and try again.
Reload pageWe're loading this page. If it does not appear, reload and try again.
Reload pageLevelUpCTF generates, calibrates, and evolves CTF challenges for you — across 36+ categories, from web and pwn to DFIR, threat hunting, smart contracts, and OT/ICS defense. ELO-matched to your skill, not to a static path.
Specialist models design, critique, repair, and calibrate through SAGE — then the v2 release lane hands the exact revision to an independent solver, an independent quality gate, and operator review. This is a self-improving cyber range for the agentic security era, not a one-shot content generator.
LLM agent drafts the challenge brief — vulnerable app, malicious binary, or incident packet.
Deterministic linter catches broken Dockerfiles, missing flags, and obvious generator slop before build.
Image builds, services come up healthy, auto-solver reaches the flag end-to-end.
Par time measured, difficulty scored against target ELO band, gap closed or sent back.
Stage failure? Repair agent pulls institutional memory and patches the draft instead of regenerating.
Hardened container image ships to the library with stream labels and difficulty badge.
Type-aware attack agent proves the flag is reachable via HTTP, crypto solver, binary exploit, or JS contract call.
Skill-vector-aware hint agent generates 3 progressive hints tied to your weakest axis.
Nightly worker runs five loops: recalibrate, mutate, evolve prompts, fill difficulty gaps, retire miscalibrated.
The Model Council governs the REACTOR v2 release lane; legacy challenges retain their existing lineage. Today, v2 is focused on proving every new training scenario before it reaches the player pool. See the full pipeline →
One platform. Same ELO. Same skill vector. Offence, defence, full-spectrum, or critical-infrastructure.
Find the bug, chain the primitives, capture the flag. Real apps, real vulns, real exploit chains.
Triage SIEM alerts, correlate evidence, name the threat. Live captures, real logs, real attackers.
ELO-matched across the full offensive / defensive spectrum. The hardest tier on the platform.
Anomaly hunts, IR triage, safety-violation detection on Modbus, DNP3, S7, OPC-UA, and EtherNet/IP. Simulators only.
REACTOR's evolution worker runs five loops at 00:01 UTC. Challenges that everyone solves too fast get mutated. Prompts that produce boring briefs get retired. Gaps in the catalogue get filled from real solve-rate data. Challenges that drift out of their calibrated band get demoted or retired.
The Model Council creates and challenges the revision through SAGE. It earns the badge only after live replay, an independent solver, quality review, and operator sign-off. Creative by design. Proven before you play.
Today: hand-curated, real-world-inspired multi-stage DFIR campaigns. Automated breach-report URL ingestion — paste a published report, REACTOR reconstructs it as a multi-stage scenario — is coming soon.
Your 15-axis challenge-type skill vector updates on every solve. The matchmaker queues the next challenge in your growth zone — not where a linear path says you should be.
Dedicated container per session with the right toolkit for the category. Terminal access over WebSocket — no simulations, no multiple choice.
Every challenge has an AI solver par time. Beat it and you earn an Eagle: 2× coins and a mark on your par ratio. Compete against the machine.
Every keystroke. Every retry. Every hint. Captured, classified, and graded. AI-vs-human detection ships as a first-class signal.
Multi-stage DFIR campaigns that chain SOC alert triage — verdict, IOCs, MITRE ATT&CK, containment — into forensic question-banks over logs, on-chain traces, and supply-chain artifacts. Inspired by real incidents, defanged and fictionalized, with no real victim data. ELO-matched to each analyst, graded platform-side.
A real-world-inspired build-system compromise, fictionalized end to end. Triage the first alert, then work the forensic trail through tampered artifacts, beaconing, and lateral movement.
An exchange-style multisig takeover and fund drain, fully fictionalized. Triage the on-chain alert, then trace the fund flow across hops and bridges to scope the loss.
Built for enterprise SOC, blue teams, and crypto-exchange security. See enterprise →
Every challenge has an AI par time — the moment our solver captures the flag. Beat that par, and you've got an Eagle. Here's who's running the platform this week.
Free for practitioners. Enterprise pricing transparent on /pricing.