CohortStrike SecOps
23–25 Jan 2026 · Hybrid Bengaluru
Mission control
CohortStrike'sSecOps 2026
BUILDBREAKDETECTRESPONDFIXPROVE
00Days
00Hours
00Minutes
00Seconds
Boarding pass
Howyougetin.
Read the ticket
Campus nominates. HQ admits. You fly six missions.
Students cannot sign up here. A college registers, HQ approves it, and the campus adds your name. Edraline then emails a password — that mail is your boarding pass.
After you sign in you do not just “build an app.” You build one, attack it, detect the attack, handle the incident, patch it, and prove the fix. Six missions. 100 points.
Nov 2026 · Remote India
Campus Qualifiers
08 Mar 2026 · 100% remote
Threat Hunt Night
19 Apr 2026 · Students only
DFIR Weekend
Briefing
Unmatchedpace.
Build any digital product that meets the minimum technical requirements. Then we test how well you can secure it. The roster stays behind a password HQ or the campus issues.
- Target Students in cybersecurity
- Objective Build, break, detect, respond, fix, prove
- Mission Remote campus operation
- Status Active
hunt/node-07.pcapSOC Analyst
SECOPS 2026 · MISSION CONTROL
What you actually do.
- BuildShip a live product→
- BreakAttack your own app→
- DetectCatch the exploit→
- RespondHandle the incident→
- FixPatch and retest→
- ProveSeal the evidence
You do not only ship a product. You become the builder, the attacker, the analyst, and the defender — in that order. Each mission has a job in plain language, then a code name for the war room.
Build any digital product that meets the minimum technical requirements. Then we test how well you can secure it.
Mission 02 of 6 · OPERATION: BREACH
Break
Identify and demonstrate security weaknesses in the team's own deployed application.
- Target
- YOUR APPLICATION
- Points
- 20 / 100
- Threat
- HIGH
The team stops being only the developer and becomes the attacker. Every exploit must target the authorized environment or the competition sandbox. Finding a issue without controlled proof does not score.
Security scorecardDemonstration data
Competition artifact
BUILD18/20BREAK16/20DETECT17/20RESPOND12/15FIX14/15PROVE8/10
Total85/100
Live operations boardDemonstration data
Fictional callsigns · not event results
| Rank | Team | BUILD | BREAK | DETECT | RESPOND | FIX | PROVE | Total |
|---|---|---|---|---|---|---|---|---|
| 01 | NullPointer ●●●◐○○ | 18 | 17 | 19 | 13 | 14 | 7 | 88 |
| 02 | RootAccess ●●●◐○○ | 19 | 16 | 17 | 12 | 15 | 8 | 87 |
| 03 | CyberForge ●●◐○○○ | 17 | 18 | 16 | 14 | 14 | 6 | 85 |
| 04 | ZeroDay ●●◐○○○ | 16 | 17 | 18 | 11 | 13 | 9 | 84 |
Command
Run the campus from one desk.
Nominate the roster, send the login mail, and watch who unlocks the scan. The college dashboard is the same surface you see in the frame — dark, quiet, and exact.
Register a campusOperations
Nine fronts. One clock.
Pick the discipline. The score is still the six-mission loop: BUILD → BREAK → DETECT → RESPOND → FIX → PROVE.
Critical
Threat Hunting
Find the unknown activity before it finds you.
Critical
Incident Response
Contain the incident, then restore the service.
High
Web Security
Break the app you shipped, then close the hole.
High
Cloud Security
Lock identities, storage, and the control plane.
Med
Digital Forensics
Read the trail. Prove what happened.
High
Malware Analysis
Classify the sample. Keep it inside the lab.
Med
OSINT
Turn public traces into a lead you can defend.
High
Blue Team / SOC
Watch the queue. Escalate what is real.
Critical
Detection Engineering
Write the detection, then prove it fires.
The gate
Thegatestaysclosed.
Spectators can read the story. The roster, the clock, and the scan stay behind login.
HQ admits the campus
College registration is a petition. The dashboard stays dark until Admin says yes.
No public roster
There is no student join form. If your campus is not approved, this door stays shut.
Password by mail
Edraline emails the password after the campus names you. You never pick it here.
One device
A second login ends the first session immediately.
One clock
The brief unlocks for every approved campus at the same second.
Proof is sealed
Live URL, repository, LinkedIn post and scan trail lock before the window closes.
Bench
Theallowedbench.
Eleven surfaces. Use any mix. The score is the product you can defend. Cursor is on the bench as agent ide.
Live stack
Frontend,API,database.
Ship on the live stack. Product type is yours. The score is how well you can secure it.
Vercel
Server
Railway
Server
AWS
Server
PostgreSQL
Database
Supabase
Database
MongoDB
Database
Stripe
Payments
Razorpay
Payments
Threat detected
Split.Classify.Quarantine.
Authorized sandbox only. Families are labels from detection — the sample never leaves the lab.
Source Remote network · Node 07
Status Analysis in progress
DPI Engine · node-07 LIVE
DPI
Every packet has a story. This reveals it.
HTTPSDNSAPISSHSMTPWannaCryLockBitEmotetRedLineMiraiAgent Tesla
Ransomware
WannaCry
Ransomware
LockBit
Ransomware
REvil
Ransomware
Conti
Ransomware
Ryuk
Ransomware
NotPetya
Botnet
Emotet
Botnet
TrickBot
Botnet
QakBot
Botnet
Dridex
Botnet
Mirai
Stealer
RedLine
Stealer
Agent Tesla
Stealer
Raccoon
Stealer
FormBook
Spyware
Pegasus
Worm
Stuxnet
Worm
Conficker
Pricing
Accessisgated.Prizesareverified.
Campus and student access stay behind HQ approval. National purses pay out after verification — not before.
Campus
Free to apply
HQ approves each college before the desk opens.
- College dashboard after approval
- Roster and invitation desk
- Login mail to every student
- One shared brief clock
Student
Included
Nominated by your campus — no public signup.
- Password emailed by Edraline
- Live brief and build window
- Authorized scan queue
- Sealed proof submission
Dealer
Channel stock
License bundles through Edraline partners.
- Hackathon license keys in stock
- Issue bundle tied to roster
- Fulfillment on the partner desk
- HQ audit on every handoff
Prizes
Firststandsinthemiddle.
#02 · Second
₹01234567890123456789,012345678901234567890123456789Internship track + national purse- ₹20,000 verified purse
- Internship track
- National ranking on the board
#01 · First
₹01234567890123456789,012345678901234567890123456789Flight, internship track, job shortlist- ₹25,000 verified purse
- Finale travel
- Internship track
- Job shortlist after HQ review
#03 · Third
₹01234567890123456789,012345678901234567890123456789Certificate + finalist purse- ₹15,000 verified purse
- Finalist certificate
- National ranking on the board
Timeline
How it works.
Scroll ↓
Campus · 01
A campus registers and is approved
The college registers with campus details. HQ Admin approves. Then the live college dashboard opens.
Roster · 02
The campus adds students
On the live dashboard the coordinator adds name, phone, email and university ID. Students cannot add themselves.
Login · 03
Login arrives by email
Edraline emails each student a password. They sign in with that email and password — no public access link.
Brief · 04
The brief unlocks together
One countdown. One challenge. Every approved campus sees it at the same second.
Build · 05
Build on the allowed bench
Ship any digital product that meets the security baseline. AI tools are allowed. The score is whether the app can be attacked and defended.
Missions · 06
Run the six missions
BUILD → BREAK → DETECT → RESPOND → FIX → PROVE. Every stage produces evidence and points.
Seal · 07
Seal the proof
Live URL, repository, detections, incident timeline, patch retest, and the evidence package lock together.
Results · 08
Results lock
HQ scores the sealed build. First, second and third stand on the board. Internship tracks and the purse follow verification.
Field
Operatorsinthefield
The room
50,000+hackathonparticipants
0+
Field notes
From the desks.
Beacon on 10.0.7.12 matched a lab family. Quarantine held inside the sandbox.
Roster sealed for the evening window. Login mail is out. Cap is 86% full.
Rule fired on the patched build, then went quiet on retest. Evidence locked.
Memory strings matched a credential dumper. Host isolated. Timeline attached.
01Can a student register on this website?
No. Students do not self-register. A college registers, HQ Admin approves that campus, the college adds students on the live dashboard, and Edraline emails each student a login.
02How does college access work?
Use College registration with campus details. After HQ Admin approval, the coordinator email receives a password. College login is email plus that password.
03How does student login work?
Your campus adds you. Edraline then emails your email address a password. Sign in on Student login with that email and password.
04Who can participate?
Eligibility is set by each approved campus and the event team. Ask your department, placement cell or campus coordinator.
05What do teams actually do?
Six sequential missions: BUILD, BREAK, DETECT, RESPOND, FIX, and PROVE. You build any digital product that meets the minimum security baseline, attack your own app, detect the attack, investigate a simulated incident, patch with a retest, and submit the evidence package. 100 points total.
06Do I need security experience?
Not necessarily. Strong building fundamentals and a willingness to reason about secure software matter most.
The network is waiting
Areyouready?
Colleges register and wait for HQ. Students sign in with the password Edraline sends after the campus adds them.