Breach the system.
Hack the Hospital.
One afternoon. One hospital. Four flags. If you can't walk past a locked door without wondering what's behind it, we want to watch you work.
Bring any AI you like. It isn't the thing we grade.
Five reasons to give up a Thursday afternoon
What you get out of it
Real vulnerability classes. A flag that takes actual thinking to reach.
ON2IT's Security Special Service Team watches how you think, not what you typed.
Every model, every agent, every tool you already use. What we're reading is what you do when the model is confidently wrong.
A SOC tour, a meet and greet, and a foodtruck. No badge required.
Do well and you skip the wait. You talk straight to the people who hire.
One live target. Three hours. Four objectives.
The mission
Live target
Operation: Tainted Supply
Riverside Hospital looks like any regional hospital. Breach the perimeter, cross into OT, take the water treatment system. And the triage assistant on the front desk is an AI that is endlessly helpful and trusts absolutely everything it reads. Start wherever you like.
Difficulty
Hard enough to sting, small enough to finish alone.
Riverside Hospital runs inside an isolated range built for this event. No real hospital, patient data, or live infrastructure is touched.
- Target
- riverside-hospital.local
- Segment
- OT / ICS
- System
- Water Treatment
if (user.role !== "operator") {
return false;
}
return true;
}
We don't hire analysts who memorized a playbook. We hire people who understand how an attacker actually moves. Every one of us works next to a model all day. The job is knowing the exact moment to stop believing it.
Why we're hiring SOC analysts through an offensive CTF
Curiosity over credentials
Who should apply
Degree or not, if security is already what you do on a Tuesday evening for no reason at all, you qualify.
What makes you stand out
- A CTF ranking, a home lab, or a GitHub full of half-finished experiments
- Evenings spent making a model do something it was told not to do
- Curiosity that turned into practice, on your own time
- The habit of taking something apart just to see how it fails
One event, eight checkpoints
The schedule
Frequently asked questions
Before you apply
Can I use ChatGPT, Claude, or my own agents during the CTF?
Yes. All of them, all afternoon, no disclaimer needed. The people scoring you work next to a model every day. What we're reading is your judgment: what you asked, what you verified, and how fast you spotted the answer that was wrong.
Do I need a cybersecurity degree, or a degree at all?
A degree is welcome, but never required. We ask what you have broken, built, and stayed up too late reading about - inside a classroom or outside one.
I'm switching careers into security. Am I too far behind?
Some of the sharpest people in this room started somewhere else entirely. We count the hours you have already put in, not the years on a payroll.
Are you actually attacking a real hospital?
Riverside Hospital is fictional, built on an isolated training range for this one afternoon. Real hospitals and real patient data stay out of it.
Does doing well guarantee a job offer?
It guarantees a conversation with the people who do the hiring, on the same day. The offer still has to be earned.
What should I bring?
A laptop, whatever models you already use, and the itch to find out how something works. Prior CTF experience is a bonus, never a filter.
Registration closes Sep 22
Claim your spot
37 seats left. You bring the curiosity and your favorite model, we bring the hospital.
Sign up solo. There is no team option, and you won't need one.