Training Description
Key Takeaways
- Free jeopardy-style Capture the Flag competition for U.S. high school students in grades 9–12
- Virtual event scheduled for September 23–24, 2026, organised by CYBER.ORG
- Challenges span cryptography, network security, digital forensics, web vulnerabilities and ethical hacking
- Teams compete under adult coach supervision with access to a practice site for preparation
- Designed to address the national cybersecurity workforce shortage through early student engagement
Introduction
The National Cyber Cup is a two-day virtual Capture the Flag competition that introduces American high school students to practical cybersecurity challenges. Organised by CYBER.ORG, a programme of the Cyber Innovation Center with funding support from CISA, the event targets students in grades 9 through 12 across the United States and its territories. As demand for cybersecurity professionals continues to outpace supply, competitions like this serve a dual purpose: they develop technical aptitude in young learners while generating sustained interest in cyber careers at a formative stage.
About the National Cyber Cup
The National Cyber Cup follows a jeopardy-style CTF format, a widely recognised competition structure in which participants solve discrete challenges across multiple cybersecurity domains to earn points. Unlike attack-defence CTF events where teams simultaneously protect their own systems while targeting opponents, jeopardy-style competitions focus purely on problem-solving against a fixed set of challenges. This format makes the event accessible to students with varying experience levels while still rewarding deeper technical knowledge.
Participation is free and open to teams of high school students, each of which must be supervised by an adult coach. The coach requirement ensures appropriate oversight and creates a natural connection between classroom instruction and competitive application. A dedicated practice site allows teams to familiarise themselves with the competition environment and challenge types before the main event.
Technical Domains and Challenge Areas
Jeopardy-style CTF competitions typically draw from a consistent set of cybersecurity disciplines, and the National Cyber Cup is structured around these core areas. Cryptography challenges test participants’ ability to encode, decode and analyse encrypted information. Network security tasks require students to examine traffic patterns, identify anomalies and understand protocol behaviour. Digital forensics problems involve recovering and interpreting data from files, memory dumps or disk images.
Web vulnerability challenges expose students to common security flaws in web applications, teaching them to think like both attackers and defenders. Ethical hacking scenarios round out the experience by requiring participants to chain together multiple techniques to achieve specific objectives. Together, these domains mirror the breadth of skills that cybersecurity professionals apply in operational environments.
Addressing the Cybersecurity Workforce Gap
The United States faces a persistent shortage of qualified cybersecurity professionals, with hundreds of thousands of positions remaining unfilled across government and private sector organisations. This gap creates tangible risks for critical infrastructure, financial systems and national security. Workforce development initiatives that engage students before they enter higher education or the job market represent one strategy for expanding the talent pipeline over time.
The National Cyber Cup positions itself explicitly within this workforce development context. By exposing students to realistic challenges and the collaborative problem-solving that characterises professional cybersecurity work, the competition aims to convert curiosity into commitment. Students who participate gain not only technical skills but also a clearer understanding of what cybersecurity careers actually involve, which can inform their educational and professional choices.
Who Should Participate
The competition is designed for high school students in grades 9 through 12 who have an interest in technology, problem-solving or cybersecurity. Prior competition experience is not required, though students with exposure to programming, networking fundamentals or previous CTF events may find certain challenges more approachable. The team-based format encourages collaboration and allows students with different strengths to contribute meaningfully.
Educators, school IT staff and administrators involved in STEM programming will find the event relevant as a practical extension of classroom cybersecurity instruction. The adult coach requirement creates an opportunity for teachers to engage directly with students in a competitive learning environment while observing how theoretical concepts translate into applied skills.
The Role of K–12 Cybersecurity Education
Competitions like the National Cyber Cup sit within a broader ecosystem of K–12 cybersecurity education initiatives. CYBER.ORG, operating under the Cyber Innovation Center, develops curriculum resources and programmes intended to integrate cybersecurity concepts into primary and secondary education. CISA’s involvement as a funding partner reflects federal interest in building a more resilient national cyber posture through early education investment.
For students, participation offers a low-stakes entry point into a field that can otherwise seem inaccessible. For schools, it provides a structured activity that complements existing computer science or information technology coursework. The combination of hands-on challenge, team collaboration and exposure to authentic cybersecurity tasks creates an experience that textbooks and lectures alone cannot replicate.