Tournaments and Competitions

Tournaments in SecDim are known as Wargames — time-bound, competitive games where players race to solve challenges and climb the leaderboard.

Setting Up

Wargame are created as games with specific tags that enforce competitive behaviour.

  1. Go to Company Dashboard

  2. Click AddGame

  3. Select the challenges for the tournament

  4. Apply the following tags:

Tag Purpose

TimeEnforced

Strictly enforces the game’s start and end time. Without this tag, the game defaults to learning mode with no time limit.

Live

Marks the game as live and visible to players. Required for attack and defence format.

NoHint

Disables all hints. Recommended for competitive wargame to ensure a level playing field.

NoHintPenalty

Alternative to NoHint — hints are available but using them does not affect score. Use this for less competitive or training-focused events.

NoLeaderboard

Hides the leaderboard. Use only if you want to reveal results at the end rather than showing a live ranking.

See Manage Games for the full tag reference and step-by-step game creation guide.

Challenge Formats

SecDim supports four challenge formats, each targeting different skills and team dynamics.

AppSec and DevSecOps (Secure Coding)

Identify and fix code-level vulnerabilities to lift your team’s secure coding and devops baseline.

  • Who’s involved: Developers (lead), Security (review/guidance), Ops (CI/tooling as needed)

  • How it works: Single-player, timed. Points awarded for tests passed and resisting automated attacks. Hints reduce score.

  • Collaboration: Pair programming and quick triads (Dev + Sec + Ops) to review fixes and discuss exploit paths

  • Outcomes: Patched code, resilience score, skills uplift, concise fix notes

  • Duration: 15–30 minutes per challenge

Attack and Defence

Harden your own application while exploiting other players' applications to extract their secrets.

  • Who’s involved: Developers (patch), Security (attack/defend tactics), Ops (deploy/monitor)

  • How it works: Live lobby with scoring for uptime, successful exploits, and flag captures. Uses the Live tag to enable the battle page.

  • Collaboration: Cross-functional squads rotate roles with live communication to defend and coordinate attacks

  • Outcomes: Hardening patterns, exploit PoCs, team playbooks, high engagement

  • Duration: 15–120 minutes

See AI Wargame User Guide for a detailed walkthrough.

Exploitation (CTF)

Discover, chain, and exploit flaws across services to capture flags.

  • Who’s involved: Security (lead), Developers (code logic/debug), Ops (network/topology)

  • How it works: Time-bound CTF. Flags weighted by difficulty with bonus for clear write-ups.

  • Collaboration: Joint recon and chaining — Dev explains code paths, Ops maps services, Sec executes exploits with rapid hand-offs

  • Outcomes: Exploit write-ups, prioritised vulnerability list, knowledge transfer across roles

  • Duration: 15–30 minutes per challenge

Incident Response

Investigate a simulated breach from logs and artefacts, contain the incident, and recommend remediation.

  • Who’s involved: Ops (lead), Security (DFIR/IOCs), Developers (app context, patch advice)

  • How it works: Points for timeline accuracy, IOC set, root cause identification, and remediation plan. Speed bonuses.

  • Collaboration: IR huddles to reconstruct timeline, identify IOCs and root cause, agree containment and hardening actions

  • Outcomes: IR report, IOC set, improved runbooks, hardening backlog aligned to findings

  • Duration: 15–60 minutes

Running the Tournament

Before the Event

  • Set the game start and end times to match your event schedule

  • Assign the game to the relevant department, or leave unassigned for all company users

  • Share the game link with participants

  • Ensure all participants have registered accounts and can access the platform

  • Share the Player Preparation Guide with participants so they know how to get ready

  • Contact your SecDim account manager for promotional materials — sample presentations, posters, and email templates are available to help you promote the event internally

During the Event

  • Players join the game and start solving challenges

  • The live leaderboard updates in real time

  • If running an instructor-led session, the instructor can share hints or guidance at set intervals

After the Event

  • Review the leaderboard to identify winners

  • Use the Reporting Dashboard to review detailed results — completion rates, scores, and individual player performance

  • Share results and recognise top performers

  • Badges are automatically awarded to participants who complete the game

Tips for a Successful Tournament

  • Keep it short — 45–60 minutes is the ideal duration for most teams

  • Mix difficulty levels — include beginner, intermediate, and expert challenges so everyone can participate

  • Tailor to your stack — select challenges in the languages and frameworks your team uses daily

  • Run a practice round — encourage participants to complete a "Start Here" challenge before the event to familiarise themselves with the platform

  • Create custom badges — branded badges increase motivation and shareability (contact your SecDim account manager)