Mission
Intel
PC7 mission is complete – stay tuned for additional information regarding PC8.
Registration
All participants, new and returning, must create new accounts to register for the President's Cup Cybersecurity Competition.
A Login.gov account associated with your federal employee email address is required to complete registration. Please follow the steps below:
Registration Steps (Applicable to New and Existing Login.gov Users):
- Visit the President's Cup Competition Platform.
- Click the Login button.
- Enter your federal employee email address in the "Username" field and click Next.
- You will be redirected to Login.gov to complete the identity verification process.
Existing Login.gov Account:
If your Login.gov account has both your personal and government-issued email addresses, please email us at [email protected] from your .gov/.mil account so that we may:
- Verify that your government or military account is active.
- Add your .gov or .mil email address to your profile.
This update will not affect your Login.gov account.
Personal Device Use During the Competition:
If you plan to use your personal device to compete, please validate that you can successfully log in before starting your session to avoid any delays or disruptions during the competition. If you require a PIV card reader for authentication, please reach out to your agency IT for assistance ahead of time.
Individuals
- Registration: December 8, 2025 - January 13, 2026
- Round 1: January 6 - 13, 2026
- Round 2: February 3 - 10, 2026
- Finals:
- Defensive Track, May 27, 2026
- Offensive Track, May 28, 2026
Teams
- Registration: December 8, 2025 - January 27, 2026
- Round 1: January 20 - 27, 2026
- Round 2: February 17 - 24, 2026
- Finals:
- May 29, 2026
Justification Letter
Due to the time commitment of this competition, participants are encouraged to seek approval from their supervisors. Suggested language has been provided to assist with this request.
This document is intended as a suggested template for participants to adapt and use at their discretion. It is provided as a resource and does not represent an official requirement or endorsement by the Cybersecurity and Infrastructure Security Agency (CISA).
Eligibility
- Open to all eligible federal civilian employees, active duty and reserve military personnel, and Service Academy Cadets.
- Contractors are not eligible to compete.
- For any questions regarding the eligibility cap or Hack of Fame, please contact the President's Cup team.
New Eligibility Cap for Repeat Winners
Beginning with President's Cup 7 (PC7), the President's Cup team will institute a formalized cap on repeat winners to ensure fairness, encourage new talent recognition, and sustain community engagement.
- The eligibility cap will be applied to competitors (whether as individuals or as part of a team) that achieve three top 3 placements with at least one first-place finish across all future competition years and tracks beginning with PC7.
- The top 3 placements may be consecutive or non-consecutive to apply, and multiple top 3 finishes within a single year (e.g., in both an Individuals track and as part of a team) will count as a single placement year toward the cap.
Competitors who achieve three top 3 placements with at least one first-place finish in any track throughout the history of the competition will be inducted into the new President's Cup Hack of Fame. While the eligibility cap will begin tracking at the conclusion of PC7, Hack of Fame induction will apply beginning with competitors from President's Cup 1 (PC1).
Once competitors reach the eligibility cap, they are no longer eligible to place and receive awards in Individuals tracks but may continue to participate in the Teams track. To remain eligible for awards and recognition, Teams may include no more than one member that has reached the eligibility cap. This approach maintains competitive fairness while preserving opportunities for collaboration and mentorship within the team format.
Detailees to an external department can represent their home or detailed department and should seek appropriate approvals prior to participation. For example, a member of the Coast Guard detailed to DoD's US Cyber Command can represent DoD or DHS.
Teams
- Teams of 2 to 5 members can be from any federal department or agency, or branch of the Armed Services.
- Participants can only participate on one team and are finalized once the team starts Round 1. If team members are unable to continue, the team may proceed as long as at least 2 members remain.
Gamespace Environment & Rules
Challenge Environment Access
All necessary tools for solving challenges are provided within the challenge environment. To ensure competition integrity and create a level playing field for all participants, Internet connectivity is disabled within the environment (with the exception of limited Internet access to Python pip and Kali apt repositories). Participants are only required to use a modern web browser to access the challenges; no special applications are needed.
Workspaces
Each player will be provided with a Kali instance, referred to as their "workspace". This is a persistent environment that will be available to players throughout the duration of the event.
Deploying Challenges
When starting a challenge, a virtual network will be spun up and the player's workspace will be attached to that challenge's virtual network. Players are only able to connect their workspace to one challenge at a time; however, they can switch between challenges at will. Deployed challenges will continue running regardless of whether the player is connected to them or not.
During team-based events, each member will have their own workspace. All members on a team share the same challenge instances, and multiple members can be connected to the same challenge at the same time.
Connectivity
Player workspaces have Internet connectivity to Python pip and Kali apt repositories. Access to other Internet resources is blocked and attempting to bypass these restrictions is a violation of the Rules of Conduct.
Rules Of Conduct
- Violation of the Rules of Conduct as outlined may result in disqualification from the competition.
- Enforcement of the Rules of Conduct is at the discretion of the Competition Staff.
- Competitors will conduct themselves in a manner that befits employees of the federal government and members of the Uniformed Services in all aspects of the competition.
- When choosing team and individual names, competitors will follow OPSEC best practices and not use real names, work location, or other identifying information. Competitors will also refrain from any names that are vulgar or political in nature (in accordance with the Hatch Act).
- Names will go through an approval process before appearing on the leaderboard. Inappropriate language, references to political persons or parties, or otherwise inappropriate content will be asked to be changed. The competition staff reserves the right to ask any team or individual to change their name and retains final judgement on what is acceptable.
- Classified toolsets are not authorized for use. All challenges are designed to be solved using open source tools including those provided on the hosted environment.
- Any attempts at unauthorized access or "Denial of Service" attacks are forbidden and will result in disqualification. "Escaping" the virtual machines or otherwise tampering with or targeting the hosting environment is prohibited.
- Competitors must not disclose any information about the challenges to anyone outside their competition team during the respective round.
- All freely available internet resources used during the competition are allowed; this includes both subscription and licensed services.
Scoring & Advancement
Advancement
Advancement to Round 2
- The top 100 individuals in each track will advance, with no tiebreakers; all individuals tied for 100th place, in each track, will advance.
- The top 33% of teams will advance, with no tiebreakers; all teams tied at the 33% cutoff will advance.
Advancement to Finals
- The top ten (10) individuals in each track and the top five (5) teams from Round 2 will qualify for the Finals.
- In the event of a tie in the Finals, total time to complete challenges will determine the winners.
Time & Challenge Submission Restrictions
During the qualifying rounds, Individuals have 4 hours and Teams have 6 hours to complete as many challenges as they can.
The session timer runs continuously and cannot be paused once started. This applies to both Individuals and Teams. Teams should schedule their session during a time when all team members are available. Team Captains are the only individuals who can start the session.
Scoring & Partial Credit
Your round score is determined by the sum of all successful challenge components completed during your session. In the event of a tie, fastest to solve methodology will be utilized. Fastest to solve is calculated by taking the timestamp of the last correct submission across all of the challenges in the event and subtracting it from the timestamp for when the individual or team started the event. Team and individual scores for Round 1 and Round 2 will be hidden until the end of the respective round.
All President's Cup challenges have multiple parts which allow competitors to earn partial credit. Each challenge part includes the number of points awarded for providing the correct answer. Participants are limited to THREE (3) submissions per challenge.
Finals
In-Person Finals Attendance
All President's Cup finalists are required to attend the Finals in-person in the National Capital Region (NCR) to participate. The team and individual Finals competition will be held on separate days, allowing competitors to participate without conflict.
Upon notification of qualification for the Finals, competitors must RSVP to the President's Cup team by the deadline provided in the invitation, indicating their attendance. If a participant is unable to attend, competitors must notify the President's Cup team immediately.
If a finalist is unable to attend, the next highest qualifying individual or team will be invited. Teams can still compete in the Finals as long as at least two members are present.
Event Details
Location: Intelligent Office, 1934 Old Gallows Road, Suite 350, Vienna, VA 22182
Dates
- Defensive Track: May 27, 2026
- Offensive Track: May 28, 2026
- Teams: May 29, 2026
Arrival & Check-In
Individuals:
- Competition Hours: 10:00 a.m. - 2:00 p.m.
- Doors Open: 8:30 a.m. EDT
- Check-In Deadline: 9:15 a.m.
Teams:
- Competition Hours: 9:00 a.m. - 3:00 p.m.
- Doors Open: 8:00 a.m. EDT
- Check-In Deadline: 8:15 a.m.
General Information:
- Access: Take the elevator to the 3rd floor; no escort required.
- Registration Desk: Located immediately to your left upon exiting the elevators.
- Badge & Event Info: Provided at check-in.
- Personal Belongings: Competitors are responsible for their belongings.
Attire:
- Business casual or regular duty uniform (as required by your organization). Winners will be photographed with CISA senior leaders.
Guests:
- Each finalist may bring one guest. Guests must remain in the designated area and will not be able to interact with competitors during competition hours. Guests are responsible for their own lunch.
Day-of Schedule
Breaks & Fair Play:
- No official breaks - competitors can step away at their own discretion. The timer will continue running.
- Use of personal devices is monitored. Internet resources are allowed, but contacting outside individuals for help is strictly prohibited.
Photography & Media Policy:
- Photos & Video: CISA will take photos and videos throughout the event.
- Opt-Out Option: If you prefer not to be photographed, you will receive a red lanyard to indicate your preference.
- Competitor Photos: Allowed, but please be respectful of others’ privacy.
Travel & Logistics
Travel expenses are the responsibility of your organization.
Parking:
Free parking is available behind the building (opposite Gallows Road). Spaces are located in the parking garage one level below the entrance.
Metro:
Nearest Metro stop: Tysons (Silver Line), approximately a 15-20-minute walk through the mall. Bus service is also available.
Hotels Nearby:
- Garden Inn Tysons Corner
8301 Boone Blvd, Vienna, VA 22182 • (703) 760-9777 - Courtyard by Marriott Tysons
1960-A Chain Bridge Rd, McLean, VA 22102 • (703) 790-0207 - Archer Hotel Tysons
7599 Colshire Dr, Tysons, VA 22102 • (703) 912-0488 - Hyatt Regency Tysons Corner Center
7901 Tysons One Pl, Tysons, VA 22102 • (703) 893-1234 - Hampton Inn & Suites Falls Church
6430 Arlington Blvd, Falls Church, VA 22042 • (703) 538-1000
Equipment Setup
Workspace:
- All Finalists must bring their own devices to use during the event. CISA will not provide laptops. If you have any questions or concerns, please contact the President's Cup team.
- Each competitor will have a workspace with one monitor provided by CISA.
- You may bring your own keyboard, mouse, and headphones, and one additional monitor if you so desire.
Permitted Tools:
- All freely available internet resources used during the competition are allowed; this includes both subscription and licensed services.
Prohibited Actions:
- Sharing or accepting answers from external sources.
- Accessing another player’s machine or accounts.
- Attempting to access networks outside of the competition environment.
- Engaging in offensive activities (e.g., attacking another team’s systems).
- Publishing or sharing challenge solutions before CISA releases official solution guides.
Practice Resources
The Practice Area is a repository of President's Cup challenges from past competitions and is open to all users. Participants can receive certificates of completion after each challenge, which may be used for PDU/CPEs.
Platform Information
Current Status
- President's Cup challenges can be found on our Practice Area platform. Our team is working to convert and transfer all legacy challenges onto the platform.
- If you have any questions or need assistance, please contact the President's Cup team at [email protected].
Open Source Updates
The prescup-challenges GitHub project has practice resources available, including:
- Solution guides
- Challenge code from all previous competitions
- Virtual machine builds
- Challenge containers
Support
Hours of Operation
The President's Cup Cybersecurity Competition is open for participation 24/7 during registration and qualifying rounds.
Support hours during registration and qualifying rounds are as follows:
- Registration period: Monday through Friday, 8:00 AM - 4:00 PM ET
- Qualifying rounds:
- Monday through Friday, 8:00 AM - 11:00 PM ET
- Saturday and Sunday, 9:00 AM - 5:00 PM ET
- Finals: Support will be available throughout the Finals
Please Note: All times are Eastern Time (ET). Support availability is limited on weekends during the competition, as described in the hours above. Participants who choose to compete during this time do so at their own risk.
Requests for Support
Support requests are tracked in the President's Cup Support Interface. Participants create support tickets from a deployed challenge or from the Support link in the navigation bar. Participants will be able to view, update, and track a ticket's status and communicate with the President's Cup support team.
When submitting a ticket, please add as much detail as possible including screenshots, challenge name, system element(s) involved, and error messages you may have received.
Teams: Team members should coordinate with one another to avoid submitting multiple tickets for the same issue your team may be experiencing.
President's Cup Team Contact Information
The President's Cup team can also be reached via email at [email protected] during normal business hours only; Monday through Friday, 9:00 AM - 5:00 PM ET.
The President's Cup email should be used for general questions or information about the competition. Please open a support ticket within the challenge environment to request technical support.
Questions?
Feel free to reach out and get in touch for more information. You can email us here.