President's Cup 6 Cybersecurity Competition logo

President's Cup Cybersecurity Competition

Established in response to Executive Order 13870, the President's Cup Cybersecurity Competition is a national cyber competition aiming to identify, recognize, and reward the best cybersecurity talent in the federal executive workforce. Hosting challenges from across the National Initiative for Cybersecurity Education (NICE) Cybersecurity Framework, competitors will face a diverse array of challenges and will require an extensive skill set to succeed.

Logo for President's Cup 6 Teams Challenges

President's Cup 6 Teams Competition

Registration: Dec 9, 2024 - Jan 14, 2025
Qualifying Round 1: Jan 7-14, 2025
Qualifying Round 2: Feb 4-11, 2025
Final Round: Apr 10, 2025

President's Cup 6 Individuals (Track A) Logo President's Cup 6 Individuals (Track B) Logo

President's Cup 6 Individuals Competition

Registration: Dec 9, 2024 - Jan 28, 2025
Qualifying Round 1: Jan 21-28,2025
Qualifying Round 2: Feb 18-25, 2025
Final Round: Apr 8 (Track A) & 9 (Track B), 2025

Presidents Cup 6 Practice Icon

PCCC Practice Area

Practice demo challenges and content from past President's Cup competitions

Practice Area
Play Challenges from Past Rounds GitHub
Challenge Source Code,
Solution Guides, and Virtual Machines

As announced at:

cisa.gov/presidentscup

Rules FAQ

President's Cup 6 Key Information

Welcome to the sixth annual President's Cup Cybersecurity Competition! For those of you who competed in previous years—we're glad to have you back. For those of you who are competing for the first time in President's Cup 6—we're glad you joined us. Good luck to all participants, new and returning.

Here are some important updates to this year's competition:

Cross-Department Teams

Teams can include participants from different departments and agencies, or join others across the government wherever they work.

The top 33% of scores in Teams Round 1 will advance to Round 2. See FAQ #21

In-Person Finals Attendance

All President's Cup finalists must attend the Finals in-person in the Washington DC metropolitan area in order to participate.

Upon receiving notification that they have qualified for the Finals; competitors must notify the President's Cup team whether they will or will not attend.

  • Team members must respond by February 21, 2025
  • Individuals must respond by March 7, 2025

If finalists are unable to attend, the next highest qualifying individual or team will be invited. Please note that entire teams will not be disqualified from participating in the Finals as long as at least two members attend.

Bring Your Own Device (BYOD) Policy During the In-Person Finals

Beginning with President's Cup 6, CISA will not be supplying laptops as in previous years. Therefore, all Finalists must bring their own devices to use during the event. This is now a requirement to participate in the Finals. If you have any questions or concerns, please contact the President's Cup team.

Teams Finals

The Teams Finals will be one day in President's Cup 6, as opposed to two days in previous years. As in President's Cup 5, the Teams Finals will include an ICScape Room based upon Industrial Control Systems challenges.

Gamespace Package Repositories

Package repositories from the Internet have been mirrored inside the President's Cup challenge environment. The current build includes Kali and Python (PyPI). If the default VM for a challenge does not include a package, you can install additional ones via the normal commands (apt, pip).

Practice Resources

  • Practice Area | The new and improved Practice Area is a repository of President's Cup challenges from past competitions. Users can receive a certificate of completion after each challenge.
  • Open Source Updates | The prescup-challenges GitHub project has practice resources this year, including solution guides and challenge code from all previous competitions. Virtual machine builds are also included.

Gameboard Features

  • Support Inside Gameboard | Competition support is now integrated within the Gameboard web app. Participants can create support tickets from a deployed challenge or from the Support link at the top of the gameboard. The Support link is where participants view, update, and track the status of support tickets. When created from a deployed challenge, new tickets already include the challenge name, support code, and game.
  • Round Completion Certificates | When each round of the competition is over, participants can view and print completion certificates of their achievement. Certificates will be available from the Profile page in the Gameboard.

Final Words

Please review all of the rules, FAQs, and videos before starting the competition, but pay particular attention to:

Thank you all for your participation and best of luck in President's Cup 6!

Media

Videos

Images

5th Annual President's Cup Cybersecurity Competition Finals Overview

Continuous Session Timer

Register/Enroll

PC5 Trailer

President's Cup 6 Desktop Backgrounds

Competition Rules

Conduct

  1. Violation of the Rules of Conduct as outlined may result in disqualification from the competition.
  2. Enforcement of the Rules of Conduct is at the discretion of the Competition Staff.
  3. Competitors will conduct themselves in a manner that befits employees of the Federal government and members of the Uniformed Services in all aspects of the competition.
  4. When choosing team and individual names, competitors will follow OPSEC best practices and not use real names, work location, or other identifying information. Competitors will also refrain from any names that are vulgar or political in nature (In accordance with the Hatch Act). Names will go through an approval process before appearing on the leaderboard. Inappropriate language, references to political persons or parties, or otherwise inappropriate content will be asked to be changed. The competition aims to support morale building, esprit de corps, and friendly rivalries between military units, and government departments and agencies. The competition staff reserves the right to ask any team or individual to change their name and maintains final judgement on what is acceptable.
  5. Classified toolsets are not authorized for use. All challenges are designed to be solved using open source tools including those provided on the hosted virtual machines
  6. Any attempts at unauthorized access or “Denial of Service” attacks are forbidden and will result in disqualification. “Escaping” the virtual machines or otherwise tampering with or targeting the hosting environment is prohibited.
  7. Competitors will not disclose any information involving the challenges to anyone during the respective round outside of their competition team.
  8. All freely available internet resources used during the competition are allowed; this includes both subscription and licensed services.

Team Composition

  1. Participants can only be on one team and cannot change teams during the competition. Once a team has started the competition, enrollment for the team is locked, and team members CANNOT be changed later in the competition.
  2. Teams of 2 to 5 members can be from any federal Executive Branch department or agency, or branch of the Armed Services.
  3. Detailees to an external department can represent their home or detailed department. For example, a member of the Coast Guard detailed to DoD's US Cyber Command can be on a DoD or a DHS team.
  4. Detailees should seek approval of both their home agency and detail supervisor, including agreement on which agency will be responsible for awards.
  5. Team members must be government civilian employees or military service members. Government contractors are NOT allowed to participate in the President's Cup Competition.

Time and Challenge Submission Restrictions

  1. During the qualifying rounds, teams have 6 hours to complete as many challenges as they can. Individuals have 4 hours per track to solve as many challenges as they can.
  2. In the event of a tiebreaker, the "Cumulative Time" figure will be used to determine who moves on to the Final Round. The Cumulative Time is the total time spent in challenges successfully solved. This is calculated using a timer specific to each challenge on your game board. When you start a challenge, the timer starts. When you successfully solve a challenge, your score and cumulative time are updated.
  3. Correct answers will vary based on the challenge format and the questions being asked. Please refer to each challenge description which will clearly articulate the format of the answer.

Registration

  • Teams: Starts at 9:00 AM ET on December 9, 2024, and ends at 11:59 PM ET on January 14, 2025
  • Individuals: Starts at 9:00 AM ET on December 9, 2024, and ends at 11:59 PM ET on January 28, 2025
  • Participation in the President's Cup will be closed after these dates/times

Support and Contact Information

Support requests are tracked in the President's Cup gameboard support interface (an integrated ticketing service). Participants create support tickets from a deployed challenge or from the new Support link in the navigation bar. Navigate to this location within the game to view a ticket's progress and communicate with the President's Cup support team.

Please add as much detail as possible including screen shots, challenge Support Code (found in the lower-right corner of the challenge pane), any system element(s) involved, and any error messages you may have received.

The President's Cup team can also be reached via email at presidentscup@cisa.dhs.gov. Please note that using the Support interface, not the email address, will provide the most timely response. The email address is best used for general questions or information about the competition, as opposed to requests for technical support.

Hours of Operation

The President's Cup Cybersecurity Competition is open for participation 24/7 during registration and qualifying. Support during registration and qualifying is available:

  • Registration period: Monday through Friday, 8:00 AM - 4:00 PM ET
  • Qualifying rounds:
    • Monday through Friday, 8:00 AM - 11:00 PM ET
    • Saturday and Sunday, 9:00 AM - 5:00 PM ET
  • Finals: Support throughout Finals
  • Hours are Eastern Time

The President's Cup email address (presidentscup@cisa.dhs.gov) will be monitored during normal business hours only (Monday through Friday, 9:00 AM - 5:00 PM ET).

PLEASE NOTE: Support availability is limited on weekends during the competition (as described in the hours above); participants who choose to compete during this time do so at their own risk. Please make use of the tutorial challenges to ensure access and compatibility before competing.

Frequently Asked Questions (FAQ)

Below you will find some commonly asked questions and answers to help you with the President's Cup Competition. If you can't find the answer here, please contact us.

  1. What does "Cumulative Time" mean on the leaderboard?
  2. I'm a government contractor and I want to participate. Am I eligible?
  3. Will I need any special software or applications to participate in the President's Cup?
  4. How does each round's continuous session timer work?
  5. Does my score carry over from one round to the next?
  6. How are ties handled?
  7. I saw that the Finals are an in-person event. Where are the Finals held?
  8. I heard about the President's Cup too late to sign up. Will there be a future President's Cup Competition?
  9. My agency wants to enter two teams in Qualifying Round 1. Is that possible?
  10. One of my team members dropped out after Qualifying Round 1. Can I replace them with someone else for Round 2?
  11. When does registration for the Presidents Cup Competition start?
  12. You mention that the competition challenges will be mapped to the NICE Framework. Where can I get more information on the NICE Framework?
  13. I'm eligible to participate in the President's Cup, but I don't have a team. Can I participate as an individual?
  14. I'm a detailee and I want to participate. Which organization do I participate with—my original agency or my detailed agency?
  15. Can I participate on more than one team at a time?
  16. What if I can't access my .gov/.mil email?
  17. Can I copy and paste between my host and the gamespace virtual machines?
  18. If I reach my limit of virtual gamespaces (5 for teams, 2 for individuals), can I move on to another challenge?
  19. Is partial credit available for challenge submissions?
  20. Is there a recommended format for answer submissions?
  21. President's Cup Support is asking for my “challenge Support Code”. Where can I find it?
  22. How are teams selected to advance to Qualifying Round 2?
  23. How are individuals selected to advance to Qualifying Round 2?
  24. How are teams and individuals selected to advance to the Finals?
  25. What happens if I qualify for both the team and individual Finals?
  26. Are Service Academy Cadets eligible to participate?
  27. I participated in President's Cup last year. Should I create a new account or use my existing one?
  28. Can I publish thoughts, opinions, or walkthroughs of the President's Cup Challenges?
  29. Will we be able to access the Internet in the challenge environments?
  30. What happens if I qualify for the Finals and am unable to attend in person?
  31. Can I configure multi-factor authentication to use something other than my email address (e.g., a TOTP application)?
  32. My email address has changed. Can I add an email address to my existing account?
0.

What does "Cumulative Time" mean on the leaderboard?

The Cumulative Time column is only used for tiebreaking purposes. When a challenge is started, a timer tracks how long it takes to solve that challenge. The sum time of all successfully solved challenges is posted to the leaderboard under Cumulative Time. Again, this is for tiebreaking purposes only.

1.

I'm a government contractor and I want to participate. Am I eligible?

No. Government contractors cannot participate in the President's Cup.

2.

Will I need any special software or applications to participate in the President's Cup?

No. All that is needed is an up-to-date web browser and your registered account. Supported browsers are: Chrome, Firefox, and Edge.

3.

How does each round's continuous session timer work?

A session timer starts when you click the "Start Session" button on a Gameboard's welcome page. After starting the session, you/your team will have a limited amount of time to complete as many challenges as you can.

The session time limits for the Presidents Cup Competition are:

Competition Session Time Limit
Teams Competition 6 hours
Individuals Track A 4 hours
Individuals Track B 4 hours

The session timer runs continuously and cannot be paused. Your round score is determined by the sum of all successful challenges completed during your session.

PLEASE NOTE: For the Teams competition, any team member can start the session.

4.

Does my score carry over from one round to the next?

No. The score for each round starts at zero.

5.

How are ties handled?

In the event of a tiebreaker, the "Cumulative Time" figure will be used to determine who moves on to the Final Round. The Cumulative Time is the total time spent in challenges successfully solved. This is calculated using a timer specific to each challenge on your game board. When you start a challenge, the timer starts. When you successfully solve a challenge, your score and cumulative time are updated.

PLEASE NOTE:

  • Your challenge timer does not stop if you "destroy" a challenge space or go work on another challenge. If you start a challenge, then start and work on another challenge, and return to your previous challenge, your challenge timer is still running.
  • Time spent in challenges is added to your cumulative time when points are scored. For a challenge in which you score zero (0) points, the time spent attempting that challenge will not be added to your cumulative timer. You won't be penalized for trying!
  • Your overall competition time is still capped at the maximum time (6 hours for teams and 4 hours for individuals) from when you launch your first challenge.
6.

I saw that the Finals are an in-person event. Where are the Finals held?

The 2024 Finals will be held in the Washington DC metropolitan area. The specific facility is to be decided (TBD), and determiniation will be made in the coming months. Participants are responsible for travel if they qualify.

7.

I heard about the President's Cup, but it is too late to register. Will there be a future President's Cup Competition?

Yes. The competition is held annually by CISA per Executive Order 13870.

8.

My agency wants to enter two teams in Qualifying Round 1. Is that possible?

Yes. A department or agency can enter more than one team in the competition.

9.

One of my team members dropped out after Qualifying Round 1. Can I replace them with someone else for Round 2?

No. Once a team is established, members cannot be added. You have the option to compete without that team member, provided your team still has at least 2 members.

10.

When does registration for the President's Cup Competition start?

Registration for President's Cup 6 Competition opens on Monday, December 9th and closes on Tuesday, January 14th for Teams and Tuesday, Janurary 28th for Individuals.

11.

You mention that the competition challenges will be mapped to the NICE Framework. Where can I get more information on the NICE Framework?

The National Initiative for Cybersecurity Careers and Studies (NICCS) provides a comprehensive review of the NICE Framework.

12.

I'm eligible to participate in the President's Cup, but I don't have a team. Can I participate as an individual?

Yes. Participants can compete either as part of a team, as an individual, or both. Round 1 is open to any and all Federal employees and uniformed service members.

13.

I'm a detailee and I want to participate. Which organization do I participate with—my original agency or my detailed agency?

Detailees to a specific agency can participate on a team for their detailed agency or their home agency subject to the approval of both their home agency and detail supervisor, including agreement on which agency will be responsible for awards.

14.

Can I participate on more than one team at a time?

No. You can only be a team member on one team.

15.

What if I can't access my .gov/.mil email?

If you cannot access your .gov/.mil email during registration please contact presidentscup@cisa.dhs.gov to verify your federal employment.

To use multi-factor authentication without access to your .gov/.mil email, visit your Identity profile and select Configure 2FA. You'll need to be logged in for this, so be sure to do this while you do have access to email.

There you can generate a Time-based One Time Password (TOTP) secret key. Use this secret key with any TOTP-enabled authentication app, such as Duo Mobile or Google Authenticator, by simply scanning the barcode. If you don't have access to your device, copy down the secret key and later input it into the TOTP app on your device.

16.

Can I copy/paste between my host and the gamespace virtual machines?

Yes. The cog button in the upper-left corner of the virtual machine console allows you to move text bidirectionally between your host and that virtual machine.

17.

If I reach my limit of virtual gamespaces (5 for teams, 2 for individuals), can I move on to another challenge?

Yes. If you start a challenge but would like to move on to another challenge without finishing it, you can DESTROY that gamespace. However, the challenge timer will not stop. When you return to this challenge, you can RESTART the gamespace in its original state.

18.

Is partial credit available for challenge submissions?

Yes. All President's Cup challenges have multiple parts which allow competitors to earn partial credit. Each challenge part includes the number of points awarded for providing the correct answer.

PLEASE NOTE: When you click the Submit button, ALL of your answer parts will be sent to the grading server, and you are limited to THREE (3) submissions per challenge. This applies whether or not you leave any answer fields empty.

19.

Is there a recommended format for answer submissions?

Correct answers will vary based on the challenge format and the questions being asked. Please refer to the example answer provided beneath each answer submission form field.

20.

President's Cup Support is asking for my “challenge Support Code”. Where can I find it?

The challenge Support Code can be found in the lower-right corner of the challenge pane. The Support Code looks similar to this: a347c5c6.

21.

How are teams selected to advance to Qualifying Round 2?

The top 33% of teams based on their final scores advance to Qualifying Round 2 as well. No time-based tiebreakers are used to calculate the 33% cutoff, so all teams tied at the score cutoff will advance.

22.

How are individuals selected to advance to Qualifying Round 2?

In the Individuals competition, the top 100 scores in each track advance to Qualifying Round 2. There are no tie-breakers; all tied for 100th place in each track will be invited to continue. Qualifying Round 1 leaderboard scores are used to determine the cutoff line, and no time-based tiebreakers are used in this calculation.

23.

How are teams and individuals selected to advance to the Finals?

The top five (5) teams and top ten (10) individuals in each track will advance to the Finals based on each respective leaderboard at the end of Qualifying Round 2.

24.

What happens if I qualify for both the team and individual final rounds?

The final rounds for the President's Cup team and individual competitions will be held on different days. Competitors who qualify for any and all Finals round events will be able to compete in each one without a conflict.

25.

Are Service Academy Cadets eligible to participate?

Service Academy Cadets are eligible and encouraged to participate! Cadets can register with their .edu email address, or contact the help desk at presidentscup@cisa.dhs.gov and we will work to get you enrolled.

26.

I participated in President's Cup last year. Should I use my existing account or create a new one?

If you are using the same email address as last year, use the Password Reset option to gain access to your existing account.

27.

Can I publish thoughts, opinions, or walkthroughs of the President's Cup Challenges?

Competitors can publish thoughts, opinions or walkthroughs anywhere online (e.g., social media, YouTube, blog, etc.) but should wait until the end of the respective round. Publishing before the end of a round is in violation of Competition Conduct Rule #7 and could result in removal from the current President's Cup.

28.

Will we be able to access the Internet in the challenge environments?

No. The required tools to solve a challenge will be included in the challenge environment. Internet connectivity is removed to keep the integrity of the competition and ensure there is a level playing field for all participants. Mirrors of standard application repositories (Apt and Pip) are provided for use inside of the challenge environment to install additional tools on the provided virtual machines.

29.

What happens if I qualify for the Finals and am unable to attend in person?

In person attendance is mandatory in order to participate in the Finals. Once you are notified that you qualified for the Finals you will have to RSVP to the President's Cup Team.

  • Teams must respond by February 21, 2025
  • Individuals must respond by March 7, 2025

If you cannot attend, the next highest qualifying individual or team will be invited. Please note that entire teams will not be disqualified from participating in the Finals as long as at least two members attend.

30.

Can I configure multi-factor authentication to use something other than my email address (e.g., a TOTP application)?

To use multi-factor authentication without access to your .gov/.mil email, visit your Identity profile and select Configure 2FA. You'll need to be logged in for this, so be sure to do this while you do have access to email.

There you can generate a Time-based One Time Password (TOTP) secret key. Use this secret key with any TOTP-enabled authentication app, such as Duo Mobile or Google Authenticator, by simply scanning the barcode. If you don't have access to your device, copy down the secret key and later input it into the TOTP app on your device.

View the Register/Enroll video for more information.

Note: If you no longer have access to the email address that you used to create your account, please contact presidentscup@cisa.dhs.gov to have your new email address added to your account.

31.

My email address has changed. Can I add an email address to my existing account?

To add an email address to an existing account, visit your Identity profile and select Credentials. You'll need to be logged in for this, so be sure to do this while you do have access to email if you do not have email-less MFA configured.

There, you can add additional email addresses to your account. You will be able to authenticate to your account using any one of the listed email addresses after email ownership is confirmed with a verification code.

Note: If you no longer have access to the email address that you used to create your account, please contact presidentscup@cisa.dhs.gov to have your new email address added to your account.