--- title: RCTF - Reflare Capture the Flag Platform description: Breach-inspired CTFs and custom Docker labs in a secure cloud. Train teams on real attacks, fast, with zero infrastructure. image: https://reflare.com/hubfs/Reflare%20website%20images/Reflare%20Logos/round%20logo.png --- [![Reflare home](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=421&height=150&name=reflare%20logo.png "Reflare home")](https://reflare.com?hsLang=en) [![logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/logo.png?width=262&height=82&name=logo.png "logo")](https://reflare.com/act3?hsLang=en) [![reflare logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=168&height=60&name=reflare%20logo.png "reflare logo")](https://reflare.com/act3?hsLang=en) - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Login](https://reflare.com/login?hsLang=en) [Buy Now](https://www.hubspot.com/) [Login](https://www.hubspot.com/)Login to your Reflare account - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Buy Now](https://www.hubspot.com/) # Train on the Attacker’s Latest Playbook — Then Build Your Own ### RCTF (Reflare Capture the Flag) For Red Team leads who need realism, agility, and measurable impact — RCTF gives you monthly breach-derived scenarios *and* a platform where you can deploy your own Docker-based challenges in minutes. [Start Your Hands On Demo](https://ctf.reflare.com/accounts/signup/) ## Strength Over Compliance ### Most training checks boxes. This one builds capability. RCTF turns real-world breaches into multi-stage scenarios you can run safely in the cloud. Not puzzles. Not theory. Actual attacker tradecraft, translated into an environment your teams can practice in. - **Timely:** New scenarios from recent incidents. - **Relevant:** Reflective of the techniques attackers are using in real operations. - **Measurable:** Clear reporting to show improvement over time. Timely Proactive Impactful [Access Demo](https://reflare.com/rctf-reflare-capture-the-flag-platform#access-demo) ## Runs in the Cloud ### Serious training without operational drag. No VMs to provision. No VPN clients to distribute. No tooling conflicts. RCTF runs entirely in the browser using containerised infrastructure and HTML5-rendered desktops. Upload a Docker Compose file and the platform automatically deploys all services in an isolated environment — ready for your teams to explore, attack, or defend. - **Instant access** - **Secure isolation** - **Scales to hundreds of users** Scalable Reliable Effortless [Access Demo](https://reflare.com/rctf-reflare-capture-the-flag-platform#access-demo) ## Risk-Free Environment ### Aggressive practice. No production risk. Every environment — whether breach-derived or custom — runs in its own isolated container network with a disposable, cloud-rendered desktop. Nothing touches corporate systems. Nothing persists after teardown. You focus on running scenarios; the platform handles orchestration, environment security, and cleanup. Efficient Secure Easy [Access Demo](https://reflare.com/rctf-reflare-capture-the-flag?hsLang=en#access-demo) ## Waving the Flag ### Capture the flag — prove the capability. Each flag represents a meaningful technical milestone: a privilege escalation, a lateral movement path, a detection opportunity, or a containment failure. This turns each run into concrete evidence of readiness. Admins get exportable metrics on: - Participation - Time-to-solve - Scenario completion - Capability trends over time Useful for security reviews, audits, and demonstrating improvement.   Achievement Validation Confirmation [Access Demo](https://reflare.com/rctf-reflare-capture-the-flag?hsLang=en#access-demo) - Methodology - Technology - Deployment - Evaluation - Methodology - Technology - Deployment - Evaluation ![Rakuten](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/Rakuten.png?width=135&height=40&name=Rakuten.png) ![NTT](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/NTT.png?width=110&height=40&name=NTT.png) ![PWC](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/PWC.png?width=79&height=60&name=PWC.png) ![Recruit](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/Recruit.png?width=149&height=40&name=Recruit.png) ![State of Oregon](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Customer%20Logos/State%20of%20Oregon.png?width=70&height=70&name=State%20of%20Oregon.png) ## Who it’s for | #### Red Teams: | Practice modern TTPs. Run recurring internal CTFs. Validate your assumptions and sharpen your operators. | | --- | --- | | #### Blue Teams: | See attacker behaviour end-to-end. Improve detection paths. Strengthen response playbooks. | | #### Engineering & DevSecOps: | Understand how real attacks unfold against services, infrastructure, and code. Shift left with hands-on insight. | | #### Contractors & Vendors: | Verify capability before granting access. Provide a standardised test environment aligned to real threats. |   ![The Starter’s Guide to Strengthening Skills with CTF](https://reflare.com/hs-fs/hubfs/Blog%20image%20in%20post/The%20Starter%E2%80%99s%20Guide%20to%20Strengthening%20Skills%20with%20CTF.jpg?width=1200&height=800&name=The%20Starter%E2%80%99s%20Guide%20to%20Strengthening%20Skills%20with%20CTF.jpg) --- ## What teams say #### Security Lead, SaaS (500+ employees) “Exactly the level of realism we needed in our training programme.” #### Head of Engineering, Fintech “Our engineers finally saw how modern attack chains actually play out.” #### CISO, Gov Agency “The cloud isolation made rollout simple and safe.” ---   Challenge yourself against the demo today ## Experience RCTF   ## See it. Test it. Judge the realism yourself. Your demo includes: - A breach-inspired multi-stage scenario - A full browser-based desktop - A safe, isolated network - Realistic tools and telemetry - An admin view with metrics and reporting   [![boot-ctf (1)](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/boot-ctf%20(1).gif?width=3840&height=1916&name=boot-ctf%20(1).gif) Get started Boot RCTF](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/boot-ctf%20(1).gif?hsLang=en)   [![play-ctf (1)](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/play-ctf%20(1).gif?width=3840&height=1916&name=play-ctf%20(1).gif) Find the flag Where is it hiding?](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/play-ctf%20(1).gif?hsLang=en)   [![solve-ctf (1)](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Product%20gifs/solve-ctf%20(1).gif?width=3840&height=1916&name=solve-ctf%20(1).gif) Impressive work You're a winner!](https://reflare.com/hubfs/Reflare%20website%20images/Product%20gifs/solve-ctf%20(1).gif?hsLang=en) ### Complete the form to receive your unique access token --- ## FAQs #### Will this install tools on our machines? No. Everything runs in Reflare’s isolated cloud environment. Your users connect via a secure browser session. Will this install tools on our machines? #### What’s in the demo? A recent breach‑inspired scenario, a set of flags to capture, and the same browser‑based experience paid users get. What’s in the demo? #### How much does it cost? $65 per user per month. Volume pricing available. How much does it cost? #### Can we track progress? Yes. Admins see who launched, flags captured, and time‑to‑solve. Exportable CSV for audits. Can we track progress? --- #### About Reflare We help customers increase cyber resilience with the #1 hands-on IT security training platform. Our developer, administrator, and non-technical user training programs enhance user skills, fulfil your compliance needs, and contribute to developing more secure technologies. Legal - [Terms of Service](https://reflare.com/terms?hsLang=en) - [Privacy Statement](https://reflare.com/privacy?hsLang=en) - [Cookie Info](https://reflare.com/cookies?hsLang=en) - [Copyright and Citation Enquiries](https://reflare.com/citation?hsLang=en) - [Contact](https://reflare.com/contact?hsLang=en) © 2026 Reflare Ltd, and/or its affiliates.   /   In business since 2009.