Registration
New participants can create an account to get started with PC8 registration. If a login was created for PC7, you can use your existing login. Participants with accounts from PC1-PC6 will need to create a new account.
A Login.gov account associated with your federal employee email address is required to complete registration. Please follow the steps below:
Registration Steps (Applicable to New and Existing Login.gov Users):
- Visit the President's Cup Competition Platform.
- Click the Login button.
- Enter your federal employee email address in the "Username" field and click Next.
- You will be redirected to Login.gov to complete the identity verification process.
Existing Login.gov Account:
If your Login.gov account has both your personal and government-issued email addresses, please email us at [email protected] from your .gov/.mil account so that we may:
- Verify that your government or military account is active.
- Add your .gov or .mil email address to your profile.
This update will not affect your Login.gov account.
Personal Device Use During the Competition:
If you plan to use your personal device to compete, please validate that you can successfully log in before starting your session to avoid any delays or disruptions during the competition. If you require a PIV card reader for authentication, please reach out to your agency IT for assistance ahead of time.
Individuals
- Registration: December 1, 2026 - January 13, 2027
- Round 1: January 6 - 13, 2027
- Round 2: February 3 - 10, 2027
-
Finals:
- Defensive Track | April 20, 2027
- Offensive Track | April 21, 2027
- Awards: Summer 2027
Teams
- Registration: December 1, 2026 - January 27, 2027
- Round 1: January 20 - 27, 2027
- Round 2: February 17 - 24, 2027
-
Finals:
- April 22, 2027
- Awards: Summer 2027
Justification Letter
Because of the time commitment of this competition, participants are encouraged to seek approval from their supervisors. Suggested language has been provided to assist with this request.
This document is intended as a suggested template for participants to adapt and use at their discretion. It is provided as a resource and does not represent an official requirement or endorsement by the Cybersecurity and Infrastructure Security Agency (CISA).
Eligibility
- Open to all eligible federal civilian employees, active duty and reserve military personnel, and Service Academy Cadets.
- Contractors are not eligible to compete.
- For any questions regarding the eligibility cap or Hack of Fame, please contact the President's Cup team.
Eligibility Cap for Repeat Winners
The President's Cup team instituted a formalized cap on repeat winners to ensure fairness, encourage new talent recognition, and sustain community engagement.
- The eligibility cap is applied to competitors (whether as individuals or as part of a team) that achieve three top-3 placements over three competition years, with at least one first-place finish across all future competition years and tracks (beginning with PC7).
- The top-3 placements may be consecutive or non-consecutive and multiple top-3 finishes within a single year (e.g., in both an Individuals track and as part of a team) will count as a single placement year toward the cap.
Competitors who achieve three top-3 placements with at least one first-place finish in any track throughout the history of the competition will be inducted into the new President's Cup Hack of Fame. The eligibility cap began tracking at the conclusion of PC7 and Hack of Fame induction will apply beginning with competitors from President's Cup 1 (PC1).
Once competitors reach the eligibility cap, they are no longer eligible to place and receive awards in Individuals tracks but may continue to participate in the Teams track. To remain eligible for awards and recognition, Teams may include no more than one member that has reached the eligibility cap. This approach maintains competitive fairness while preserving opportunities for collaboration and mentorship within the team format.
Detailees to an external department can represent their home or detailed department and should seek appropriate approvals prior to participation. For example, a member of the Coast Guard detailed to DoD's US Cyber Command can represent DoD or DHS.
Teams
- Teams of two to five members can be from any federal department or agency, or branch of the Armed Services.
- Participants can only participate in one team. Teams are finalized once they start Round 1. If team members are unable to continue, the team may proceed as long as at least two members remain.
Gamespace Environment & Rules
Challenge Environment Access
All necessary tools for solving challenges are provided within the challenge environment. To ensure competition integrity and create a level playing field for all participants, internet connectivity is disabled within the environment (with the exception of limited internet access to Python pip and Kali apt repositories). Participants are only required to use a modern web browser to access the challenges; no special applications are needed.
Workspaces
Each player will be provided with a Kali instance, referred to as their "workspace". This is a persistent environment that will be available to players throughout the duration of the event.
Deploying Challenges
When starting a challenge, a virtual network will be spun up and the player's workspace will be attached to that challenge's virtual network. Players are only able to connect their workspace to one challenge at a time; however, they can switch between challenges at will. Deployed challenges will continue running regardless of whether the player is connected to them or not.
During team-based events, each member will have their own workspace. All members on a team share the same challenge instances, and multiple members can be connected to the same challenge at the same time.
Connectivity
Network egress from player workspaces is denied by default. The only permitted outbound access is to the official Python (PyPI) and Kali Linux package repositories for installing tools and dependencies. All other internet access is prohibited. Competitors may not attempt to reach other resources through these channels (including tunneling, proxying, or relaying data over the permitted package services), nor attempt automated interaction with the competition platform. Network activity may be logged and reviewed; violations may result in disqualification.
AI Usage Limitations
Players may use artificial intelligence (AI) tools for research, analysis, or code generation; however, players are strictly prohibited from using any AI agent, script, automated tool, or external resource to directly interact with, submit commands to, or manipulate the competition platform or its interfaces on their behalf. All actions on the competition platform must be performed manually by the player.
Rules Of Conduct
- Violation of the Rules of Conduct as outlined may result in disqualification from the competition.
- Enforcement of the Rules of Conduct is at the discretion of the Competition Staff.
- Competitors will conduct themselves in a manner that befits employees of the federal government and members of the Uniformed Services in all aspects of the competition.
- When choosing team and individual names, competitors will follow OPSEC best practices and not use real names, work location, or other identifying information. Competitors will also refrain from any names that are vulgar or political in nature (in accordance with the Hatch Act).
- Names will go through an approval process before appearing on the leaderboard. Inappropriate language, references to political persons or parties, or otherwise inappropriate content will be asked to be changed. The competition staff reserves the right to ask any team or individual to change their name and retains final judgement on what is acceptable.
- Classified toolsets are not authorized for use. All challenges are designed to be solved using open-source tools, including those provided on the hosted environment.
- Any attempts at unauthorized access or "Denial of Service" attacks are forbidden and will result in disqualification. "Escaping" the virtual machines or otherwise tampering with or targeting the hosting environment is prohibited.
- Competitors must not disclose any information about the challenges to anyone outside their competition team during the respective round.
- All freely available internet resources used during the competition are allowed; this includes both subscription and licensed services.
Scoring & Advancement
Advancement
Advancement to Round 2
- The top 100 individuals in each track will advance, with no tiebreakers; all individuals tied for 100th place, in each track, will advance.
- The top 33% of teams will advance, with no tiebreakers; all teams tied at the 33% cutoff will advance.
Advancement to Finals
- The top 10 individuals in each track and the top 5 teams from Round 2 will qualify for the Finals.
- In the event of a tie in the Finals, total time to complete challenges will determine the winners.
Time & Challenge Submission Restrictions
During the qualifying rounds, individuals have 4 hours and teams have 6 hours to complete as many challenges as they can.
The session timer runs continuously and cannot be paused once started. This applies to both individuals and teams. Teams should schedule their session during a time when all team members are available. Team Captains are the only individuals who can start the session.
Scoring & Partial Credit
Competitors' round scores are determined by the sum of all successful challenge components completed during their session. In the event of a tie, a fastest-to-solve methodology will be used. Fastest-to-solve is calculated by taking the timestamp of the last correct submission across all of the challenges in the event and subtracting it from the timestamp for when the individual or team started the event. Team and individual scores for Round 1 and Round 2 will be hidden until the end of the respective round.
All President's Cup challenges have multiple parts, which allow competitors to earn partial credit. Each challenge part includes the number of points awarded for providing the correct answer. Participants are limited to THREE submissions per challenge.
Finals
In Person Finals Attendance
All President's Cup finalists are required to attend the Finals in person in the National Capital Region to participate. The Team and Individual Finals competition will be held on separate days, allowing competitors to participate without conflict.
Upon notification of qualification for the Finals, competitors must RSVP to the President's Cup team by the deadline provided in the invitation, indicating their attendance. If a participant is unable to attend, competitors must notify the President's Cup team immediately.
If a finalist is unable to attend, the next highest qualifying individual or team will be invited. Teams can still compete in the Finals as long as at least two members are present.
Event Details
Location: Intelligent Office, 1934 Old Gallows Road, Suite 350, Vienna, VA 22182
Dates
- Defensive Track: May 27, 2026
- Offensive Track: May 28, 2026
- Teams: May 29, 2026
Arrival & Check-In
Individuals:
- Competition Hours: 10:00 a.m. - 2:00 p.m.
- Doors Open: 8:30 a.m. EDT
- Check-In Deadline: 9:15 a.m.
Teams:
- Competition Hours: 9:00 a.m. - 3:00 p.m.
- Doors Open: 8:00 a.m. EDT
- Check-In Deadline: 8:15 a.m.
General Information:
- Access: Take the elevator to the 3rd floor; no escort required.
- Registration Desk: Located immediately to your left upon exiting the elevators.
- Badge & Event Info: Provided at check-in.
- Personal Belongings: Competitors are responsible for their belongings.
Attire:
- Business casual or regular duty uniform (as required by your organization). Winners will be photographed with CISA senior leaders.
Guests:
- Each finalist may bring one guest. Guests must remain in the designated area and will not be able to interact with competitors during competition hours. Guests are responsible for their own lunch.
Day-of Schedule
Breaks & Fair Play:
- No official breaks — competitors can step away at their own discretion. The timer will continue running.
- Use of personal devices is monitored. Internet resources are allowed, but contacting outside individuals for help is strictly prohibited.
Photography & Media Policy:
- Photos & Video: CISA will take photos and videos throughout the event.
- Opt-Out Option: Competitors who prefer not to be photographed can receive a red lanyard to indicate their preference.
- Competitor Photos: Competitors are allowed to take photos but should be respectful of others' privacy.
Travel & Logistics
Travel expenses are the responsibility of the competitor's organization.
Parking:
Free parking is available behind the building (opposite Gallows Road). Spaces are located in the parking garage one level below the entrance.
Metro:
Nearest Metro stop: Tysons (Silver Line), approximately a 15-to-20-minute walk through the mall. Bus service is also available.
Hotels Nearby:
- Garden Inn Tysons Corner
8301 Boone Blvd, Vienna, VA 22182 • (703) 760-9777 - Courtyard by Marriott Tysons
1960-A Chain Bridge Rd, McLean, VA 22102 • (703) 790-0207 - Archer Hotel Tysons
7599 Colshire Dr, Tysons, VA 22102 • (703) 912-0488 - Hyatt Regency Tysons Corner Center
7901 Tysons One Pl, Tysons, VA 22102 • (703) 893-1234 - Hampton Inn & Suites Falls Church
6430 Arlington Blvd, Falls Church, VA 22042 • (703) 538-1000
Equipment Setup
Workspace:
- All Finalists must bring their own devices to use during the event. CISA will not provide laptops. Questions or concerns should be sent to the President's Cup team.
- Competitor will have a workspace with one monitor provided by CISA.
- Competitors may bring their own keyboard, mouse, and headphones, and one additional monitor if so desired.
Permitted Tools:
- All freely available internet resources used during the competition are allowed; this includes both subscription and licensed services.
Prohibited Actions:
- Sharing or accepting answers from external sources.
- Accessing another player's machine or accounts.
- Attempting to access networks outside of the competition environment.
- Engaging in offensive activities (e.g., attacking another team's systems).
- Publishing or sharing challenge solutions before CISA releases official solution guides.
Practice Resources
The Practice Area is a repository of President's Cup challenges from past competitions, open to federal employees and active-duty military and reservist service members only. Users can receive a certificate of completion after each challenge (which may be used for PDU/CPEs).
Platform Information
Current Status
- President's Cup challenges can be found on our Practice Area platform. Our team is working to convert and transfer all legacy challenges onto the platform.
- For assistance, please contact the President's Cup team at [email protected].
Open Source Updates
The prescup-challenges GitHub project has practice resources available, including:
- Solution guides
- Challenge code from all previous competitions
- Virtual machine builds
- Challenge containers
Support
Hours of Operation
The President's Cup Cybersecurity Competition is open for participation 24/7 during registration and qualifying rounds.
Support hours during registration and qualifying rounds are as follows:
- Registration period: Monday through Friday, 8:00 AM - 4:00 PM ET
- Qualifying rounds:
- Monday through Friday, 8:00 AM - 11:00 PM ET
- Saturday and Sunday, 9:00 AM - 5:00 PM ET
- Finals: Support will be available throughout the Finals
Please Note: All times are Eastern Time (ET). Support availability is limited on weekends during the competition, as described in the hours above. Participants who choose to compete during this time do so at their own risk.
Requests for Support
Support requests are tracked in the President's Cup Support Interface. Participants create support tickets from a deployed challenge or from the Support link in the navigation bar. Participants will be able to view, update, and track a ticket's status and communicate with the President's Cup support team.
When submitting a ticket, please add as much detail as possible, including screenshots, challenge name, system element(s) involved, and any error messages received.
Teams: Team members should coordinate with one another to avoid submitting multiple tickets for the same issue that the team may be experiencing.
President's Cup Team Contact Information
The President's Cup team can also be reached via email at [email protected] during normal business hours only; Monday through Friday, 9:00 AM - 5:00 PM ET.
The President's Cup email should be used for general questions or information about the competition. Please open a support ticket within the challenge environment to request technical support.
Questions?
Feel free to reach out and get in touch for more information. Email us at [email protected].