Train Like the Adversary.
Every 30 Days.
Real breach simulations delivered monthly in a safe, browser‑based lab. Sharpen offensive skills without touching your corporate network.
Just $65/user/month
Volume pricing available
- Cloud‑hosted & isolated – nothing touches your corporate network
- Fresh scenarios monthly based on recent breach techniques
- Track progress & flags captured by the team
Get your demo access token
We’ll email a one‑time token that boots the live RCTF demo in your browser. No credit card.





Why RCTF
Continuously Current
New scenarios every 30 days mirror emerging attacker techniques and exploit chains.
Risk‑Free, Ready Now
Cloud‑hosted in isolated labs. No installs; launch from any modern browser.
Built for Teams
Track participation, flags captured, and time‑to‑solve. Export CSVs for audits and internal reporting.
Who it’s for
Red Teams: |
Practice modern TTPs, sharpen OPSEC discipline, and run recurring internal competitions. Use results to target skill gaps. |
Developers: |
Think like an attacker to write safer code. Explore how real exploits work and how to prevent them. |
Contractors: |
Ensure your third-party vendors have the skills required to keep your systems safe. |

How it works
1. Request token
Complete the form and use your work email to receive a unique, time‑limited access token.
2. Launch the lab
Click the link in the email to spin up a cloud instance in an isolated network. Runs in the browser.
3. Capture the flag
Work through a breach scenario. Track flags captured and time‑to‑solve on the dashboard.
What you’ll experience in the demo
-
A scenario inspired by a recent breach, delivered as an approachable, multi‑stage challenge.
-
A fully remote, HTML5‑rendered desktop—preloaded with the tools you need.
-
A clean dashboard to track progress at an individual and team level.
Feature highlights
Real incidents, always fresh
New challenges every 30 days, inspired by breach techniques observed in the wild.
Safe for all environments
Labs are containerised and isolated. Offensive tools never touch your machines or network
Zero install
HTML5‑based remote desktop experience. All you need is a modern browser.
Built for teams
Invite users, assign scenarios, and view progress. Export reports for compliance needs.
What teams say
Security Lead,
SaaS (500+ employees)
“Exactly the ‘real breach’ practice we were missing.”
Head of Engineering,
Fintech
“Our devs now understand modern attack vectors.”
CISO,
Gov Agency
“The cloud isolation keeps IT calm while we train aggressively.”