What we have actually done
We are a young organisation and we would rather show a small number honestly than a large one we cannot stand behind. Everything below is either counted live from our own database or a fixed figure from an event we ran and can evidence.
boroCTF, June 2026
Challenge design, infrastructure, and live support for a full weekend under real load — run entirely by students.
It is the clearest evidence we have that a group of students can run something at this scale, and it is where a lot of our curriculum was first tested on strangers rather than on ourselves.
- 2,000+
- Competitors
- 1,000+
- Teams
- 93+
- Countries
- 100+
- Original challenges
Figures from the final event scoreboard. Read the full recap.
The platform, counted live
Read from the production database when this page was last built, not typed into the copy by hand.
- 236
- Registered students
- 387
- Lessons completed
- 1
- Certificates issued
- 3
- Courses published
How the money turns into access
- We remove the cost, not just discount it
- A cybersecurity lab normally means licences, virtual machines, and hardware a public school cannot justify for an after-school club. Every lesson here runs in a browser against infrastructure we pay for, so a school contributes nothing and a student needs no equipment beyond the device they already use for homework.
- We start below the beginner level
- Most free security material assumes you already have Linux, networking, and a comfort with the command line. Our tracks start at what a file is and what a packet is, because the students who get shut out are precisely the ones who never had a first step.
- We teach defence by teaching mechanism
- Students learn how systems fail because that is the only way to learn how to protect them — the same reasoning behind CyberPatriot and every university security course. Everything happens in sandboxed environments we operate, under terms that prohibit using what you learn against systems you do not own.
- We hand back something portable
- A completion certificate with a public verification link, and a record of solved challenges. Not an accredited qualification, and we say so plainly — but concrete evidence a student can put in front of a scholarship committee or a club application.
What we are not claiming
We do not have long-term outcome data. We cannot tell you how many of our students end up working in security, because we have not been running long enough for that to mean anything. We are not accredited and our certificates are not a qualification. What we can show is reach, completed work, and a platform that runs. As soon as we have outcome data worth reporting, it will appear on this page.
Help us make the next number bigger
Donations pay for the lab infrastructure every lesson runs on. Bringing us into a classroom costs nothing and reaches a whole group at once.