SURFcert hacking event Capture the Flag 2026
Following the huge success of previous editions, the SURFcert Capture the Flag (CTF) is back this year! This year we’re holding the 11th edition with an exciting Jeopardy-style CTF. This year’s theme is The Last Signal from humanity’s last space station. Are you up for the challenge?
- SURF office in Utrecht
Challenging tasks combined with a touch of nostalgia
We’re challenging you and your team to take part in the SURFcert CTF 2026! Get ready for a day packed with unique security challenges, where teamwork, creativity and technical insight take centre stage. Crack puzzles, decipher codes, follow mysterious clues and capture as many flags as possible. And, of course, there’ll be a touch of nostalgia: expect plenty of old-school bits and bytes too.
Whether you’re a seasoned security puzzle expert or simply keen to put your skills to the test: everyone can take part. A bit of prior knowledge is handy, of course, but teamwork and perseverance are also key.
So round up your team, sign up and get ready for a day full of challenges, excitement and fun. Who knows, you might soon be able to call yourselves the winners of the SURFcert CTF 2026!
What is a Capture the Flag (CTF)?
A Capture the Flag (CTF) is a competition in which participants, alone or in teams, solve puzzles and technical challenges. Roughly speaking, there are two types of CTFs: Jeopardy style and Attack & Defense style.
This event is a Jeopardy style CTF. That means your team will be given assignments within different categories, such as, for example, Web Hacking, Forensics, Cryptography, Decoding, Binary and more. The goal of each assignment is to find a hidden 'flag', often a specific string that is instantly recognisable. You enter that flag on the scoreboard. If the answer is correct, your team receives points. The more difficult the challenge, the more points can be earned.
The team with the highest score at the end of the game time wins the flag!
Programme
| 8:30 | Reception and registration |
| 9:15 | Welcome and introduction |
| 9:30 | Launch |
| 15:30 | End of CTF |
| 16:00 | Award ceremony |
| 16:15 | Q&A / drinks |
For whom?
Capture the Flag is intended for both staff and students of SURF member institutions and fellow CERTs.
Registration for Capture the Flag 2026
Sign up quickly! Registration will close as soon as the maximum of 100 participants has been reached, or by 10.00 am on Monday 7 December 2025 at the latest. Due to the high level of interest in previous years, registration has often filled up well before the official closing date.
Did you register and are you unable to attend?
Cancel your (team) registration as soon as possible, so the teams on the reserve list can still participate.
Register as a team
- A team consists of a maximum of 4 participants, including the team captain. All participants must state the team name when registering.
- The team captain must indicate on the registration form that he or she is the
team captain.- Please note: simply listing the team members here does not grant access to the CTF; individual registration is required for this.
- All participants must register individually via the registration link and state the team name, for example: ByteFighters2026
Register without a team
Don't have a team but still want to participate? Then register stating 'Single Player' in the team name field. SURFcert will then add you to another team.
Sign up now SURFcert hacking event Capture the Flag 2026
- SURF office in Utrecht