picoCTF is a free computer security
game targeted at middle and high school
students. The gane consists of a seriesof challenges centered around a uniquestoryline where participants must reverse
engineer, break, hack, decrypt, or dowhatever it takes to solve the challenge.

2

PICOCTF picoCTF is a free, online computer hacking gamethat challenges beginners and experts alike to solve reallife cybersecurity problems.
“Capture the Flag” competitions, or CTFs, are popularamongst the cybersecurity community. Contestants
are presented with a set of challenges which test theircreativity, technical skills, and problem-solving abilities.
CTFs allow security enthusiasts test their skills against one
another, as well as learn from one another.
picoCTF, meaning “little CTF,” isn’t so little anymore. Over110,000 people have competed in the game since its
initial launch in 2013.
The term “hacking” is all about curiosity, exploration, anddeeply understanding how something works. Most
people who identify as “hackers” are working very hardto protect people and to make technology easier andsafer to use. Unfortunately, when most people hear orread about hacking in the news, the story is about peopleusing hacking to do harm, but this couldn’t be further
from the true essence of hacking.

3

PICOCTF was created with the mission of accomplishing two main
goals: (1) introduce young people to the field of cybersecurity
before they graduate from high school, and (2) identify the best of
the best young cybersecurity experts.
The first goal is based on the fact that right now, millions ofcybersecurity jobs remain unfilled, putting our own personal
security and privacy at risk. Part of the reason these jobs areunfilled is because most people don’t learn that cybersecurity is a4

field they can pursue until college, when most people have already
decided on a career path. Playing picoCTF exposes middle and highschool students to a burgeoning field they wouldn’t have otherwise
known about.

T E A MR E D P W N ,P I C O C T F

2 0 1 9W I N N E R S

5“ Problem solving disguised as hacking; hacking
disguised as problem solving. This is the stuff thatengages students. Would a rose by any other namesmell as sweet? No, call it hacking and be okaywith it. You guys did, and it was awesome.”
TEACHER FROM OAK HILLS HIGH SCHOOL, OAK HILLS, CA664 percent of players are moreinterested in pursuing cybersecurity
as a career as a result of playing
picoCTF 2019.

“ After the first day we were in the top 10 on the scoreboard. It wasat this point that I realized: you know, maybe this is something we’repretty good at. We ended up finishing in 3rd place, and that’s how
I ended up studying computer security in college.”
TIM BECKER, PICOCTF 2013 PARTICIPANT

T H E I R R E G U L A R PAT H TO

hacker-dom
In many cases, students have discovered they have a knack forcomputer security after playing picoCTF. It’s hard to measure
what makes a good hacker; the best ethical computer hackers
didn’t necessarily win their high school science fair, nor did they
graduate with a 4.0 grade point average or achieve a perfectscore on the SAT. Computer security experts have a complex
mix of skills, and we believe the easiest way for someone tolearn they’re good at security is to try it in the first place.

LESS THAN 20% OF US HIGHSCHOOLS OFFERED THE
AP CS COURSE IN 2016

ONLY 40% OF PROGRAMS OFFERCOURSES IN NETWORK AND/OR
INFORMATION SECURITY

7

get started
1

critical thinking skills and the willingness to learn(no prior experience required)2

access to any standard computer with a web browser

3

an internet connection

4

if you get stuck on a problem, you can use
learning resources available at picoCTF.com

8DIFFICULTY OF PROBLEMS

The best of the best
will get this far

Some experience
could get you this far

Beginners will get this far
PROGRESS IN GAME

“ Students were very engaged. The activity is exciting because students
hear about hacking but don’t know where to start. PicoCTF provides
them with a great starting point for learning what they don’t know andwhere to look for more information. Students loved the leaderboard
feature, and were fighting to be at the top.”
TEACHER FROM MINEOLA HIGH SCHOOL, MINEOLA, NY

987 percent of players had “a little bit”
or “no” background in hacking prior
to playing picoCTF.

39,349

40K
More than 5,000 girls participated in 201927,221

35K
30K

20K

18,525

16, 605

25K

picoCTF 2019

2018

2017

5K

2014

10

2013

10K

6,800

15K

0K

GROWING NUMBER OF“ I enjoyed the questions this year
they were really challenging andthe beginner questions were agood way for new people. Solving
is fun because you learn so much.”
ANONYMOUS PARTICIPANT

about pico

WHAT IS BEING SAID

Learning to attack the cyberattackers can’t happen fast enough ­Nov 14, 2018 (The New York Times)
CMU Cyber Security Contest Promises Kids A Legal Way to Practice Their
Hacking Skills — March 27, 2017 (WESA / NPR)
Carnegie Mellon hacking contest aims to get IT Security talent started young
March 27, 2017 (NetworkWorld)
Carnegie Mellon CyLab Challenge: Learn Hacking at School
March 29, 2017 (iProgrammer)
Students Challenged to Test Computer Security Skills
April 5, 2017 (Campus Technology)
Wanted: Hackers. Reward: the best
may get a spot at CMU
April 9, 2017 (Pittsburgh Post-Gazette)
To win the cybersecurity war, weneed to teach kids how to hackApril 13, 2017 (Op-Ed in The Hill)
Major, well-funded contests enticestudents to consider cybersecurity
careers
April 24, 2017 (Third Certainty)
Why our kids should learn to behackers
May 7, 2017 (Canadian Broadcasting
Channel Radio)

11

for more information, contact
picoctf.com