STEALTHCUP 2026 / HACKFEST QUÉBEC / 31.10.2026
Most CTFs reward speed.
StealthCup rewards staying invisible.
StealthCup is an evasion-focused CTF and a research project by AIT. Teams attack a live IT and OT enterprise range while a real SOC stack watches. The team that reaches its objectives with the fewest severe detections wins.
Up to 12 teams, each with an IT and an OT part, compete for the overall cup plus separate IT and OT cups. Detections show up in real time so you can adapt, and resets are allowed at a cost.
No team yet? Register individually and we will try to place you in a team.
Why participate?
- Recognition and prizes: Prizes will be announced soon. Winners are published on this website and in news releases. Participants can opt for anonymity.
- Bring your red team: Ideally 4 to 8 players, with 2 to 4 on the IT side and 2 to 4 on the OT side. There is no hard limit on team size, but stealth is key.
- Real research impact: Your attack paths and evasion tricks show where detection really breaks. The 2025 results were published at ACM AsiaCCS 2026.
Win and you join the StealthCup Hall of Fame. Register today and prove your team can operate under the radar.
Join us at Hackfest
Date: Saturday, 31 October 2026, 9:00 to 17:00
Location: Hackfest, Quebec City Convention Centre
Event details
- Limited spots: Up to 12 teams can compete. We review every registration manually before confirming a team.
- Team setup: Every team plays an IT part and an OT part, so plan for both skill sets.
- Experience: Ideal for professionals with a penetration testing background. Familiarity with evasion techniques, Windows and OT environments gives you an edge.
- Low entry barrier: The event is designed to be accessible and affordable. If you are newer to penetration testing, join a team and learn alongside experienced players.
- On site preferred: The event runs in English, and we strongly prefer teams on site in Québec City. If you can only join remotely, mention it in your registration.
Prepare for success
Participants receive technical details and objectives a few days before the event. Preparation is optional, not required.
Ready? Register your team and tell us why you want to take part and which cup interests you. We review each registration and then confirm your spot.
Privacy and consent
Participants can opt for anonymity after the event as part of our commitment to privacy and ethical research. PCAPs and event logs are collected during the event.
StealthCup 2025 in numbers
Leberkas Club Vegan was the only team to reach the OT objective.
Read the full paper in the ACM Digital Library
No team yet?
Registering as a team is always the preferred route. If you are on your own, register individually and tell us your skills. We will place you in a team that is open for extra players, or form a new team made up of individual players.