--- title: CTF as a Service – New breach simulations every 30 days | RCTF Demo description: Hands‑on CTF as a Service. New breach simulations every 30 days. Launch the live demo in your browser. Cloud‑hosted, isolated, no installs. $65/user/month. image: https://reflare.com/hubfs/Reflare%20website%20images/Reflare%20Logos/round%20logo.png --- [![Reflare home](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=421&height=150&name=reflare%20logo.png "Reflare home")](https://reflare.com?hsLang=en) [![logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/logo.png?width=262&height=82&name=logo.png "logo")](https://reflare.com/act3?hsLang=en) [![reflare logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=168&height=60&name=reflare%20logo.png "reflare logo")](https://reflare.com/act3?hsLang=en) - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Login](https://reflare.com/login?hsLang=en) [Buy Now](https://www.hubspot.com/) [Login](https://www.hubspot.com/)Login to your Reflare account - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Buy Now](https://www.hubspot.com/) # Train Like the Adversary. Every 30 Days. Real breach simulations delivered monthly in a safe, browser‑based lab. Sharpen offensive skills without touching your corporate network. ## **Just $65/user/month** ### Volume pricing available - Cloud‑hosted & isolated – nothing touches your corporate network - Fresh scenarios monthly based on recent breach techniques - Track progress & flags captured by the team [Start Here](https://ctf.reflare.com/accounts/signup/) ### Get your demo access token We’ll email a one‑time token that boots the live RCTF demo in your browser. No credit card. ![Rakuten](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/Rakuten.png?width=135&height=40&name=Rakuten.png) ![NTT](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/NTT.png?width=110&height=40&name=NTT.png) ![PWC](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/PWC.png?width=79&height=60&name=PWC.png) ![Recruit](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/Recruit.png?width=149&height=40&name=Recruit.png) ![State of Oregon](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/State%20of%20Oregon.png?width=70&height=70&name=State%20of%20Oregon.png) ## Why RCTF ### Continuously Current New scenarios every 30 days mirror emerging attacker techniques and exploit chains. ### Risk‑Free, Ready Now Cloud‑hosted in isolated labs. No installs; launch from any modern browser. ### Built for Teams Track participation, flags captured, and time‑to‑solve. Export CSVs for audits and internal reporting. ## Who it’s for | #### Red Teams: | Practice modern TTPs, sharpen OPSEC discipline, and run recurring internal competitions. Use results to target skill gaps. | | --- | --- | | #### Developers: | Think like an attacker to write safer code. Explore how real exploits work and how to prevent them. | | #### Contractors: | Ensure your third-party vendors have the skills required to keep your systems safe. |   ![The Starter’s Guide to Strengthening Skills with CTF](https://reflare.com/hs-fs/hubfs/Blog%20image%20in%20post/The%20Starter%E2%80%99s%20Guide%20to%20Strengthening%20Skills%20with%20CTF.jpg?width=1200&height=800&name=The%20Starter%E2%80%99s%20Guide%20to%20Strengthening%20Skills%20with%20CTF.jpg) ## How it works #### 1. Request token Complete the form and use your work email to receive a unique, time‑limited access token. #### 2. Launch the lab Click the link in the email to spin up a cloud instance in an isolated network. Runs in the browser. #### 3. Capture the flag Work through a breach scenario. Track flags captured and time‑to‑solve on the dashboard. ## What you’ll experience in the demo - A scenario inspired by a recent breach, delivered as an approachable, multi‑stage challenge. - A fully remote, HTML5‑rendered desktop—preloaded with the tools you need. - A clean dashboard to track progress at an individual and team level. ## Feature highlights ### Real incidents, always fresh New challenges every 30 days, inspired by breach techniques observed in the wild. ### Safe for all environments Labs are containerised and isolated. Offensive tools never touch your machines or network ### Zero install HTML5‑based remote desktop experience. All you need is a modern browser. ### Built for teams Invite users, assign scenarios, and view progress. Export reports for compliance needs. ## What teams say #### Security Lead, SaaS (500+ employees) “Exactly the ‘real breach’ practice we were missing.” #### Head of Engineering, Fintech “Our devs now understand modern attack vectors.” #### CISO, Gov Agency “The cloud isolation keeps IT calm while we train aggressively.” ## FAQ #### Will this install tools on our machines? No. Everything runs in Reflare’s isolated cloud environment. Your users connect via a secure browser session. Will this install tools on our machines? #### What’s in the demo? A recent breach‑inspired scenario, a set of flags to capture, and the same browser‑based experience paid users get. What’s in the demo? #### How much does it cost? $65 per user per month. Volume pricing available. How much does it cost? #### Can we track progress? Yes. Admins see who launched, flags captured, and time‑to‑solve. Exportable CSV for audits. Can we track progress? We’ll email a one‑time token that boots the live RCTF demo in your browser. No credit card. ## Get your demo access token [![boot-ctf (1)](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/boot-ctf%20(1).gif?width=3840&height=1916&name=boot-ctf%20(1).gif) Get started Boot RCTF](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/boot-ctf%20(1).gif?hsLang=en) [![play-ctf (1)](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/play-ctf%20(1).gif?width=3840&height=1916&name=play-ctf%20(1).gif) Find the flag Where is it hiding?](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/play-ctf%20(1).gif?hsLang=en) [![solve-ctf (1)](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/solve-ctf%20(1).gif?width=3840&height=1916&name=solve-ctf%20(1).gif) Impressive work You're a winner!](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/solve-ctf%20(1).gif?hsLang=en) #### About Reflare We help customers increase cyber resilience with the #1 hands-on IT security training platform. Our developer, administrator, and non-technical user training programs enhance user skills, fulfil your compliance needs, and contribute to developing more secure technologies. Legal - [Terms of Service](https://reflare.com/terms?hsLang=en) - [Privacy Statement](https://reflare.com/privacy?hsLang=en) - [Cookie Info](https://reflare.com/cookies?hsLang=en) - [Copyright and Citation Enquiries](https://reflare.com/citation?hsLang=en) - [Contact](https://reflare.com/contact?hsLang=en) © 2026 Reflare Ltd, and/or its affiliates.   /   In business since 2009.