StealthCup 2026

StealthCup is an evasion focused CTF and a research project by AIT, held this year at Hackfest in Quebec City. Most CTFs reward speed. StealthCup rewards staying invisible.

Teams attack a live IT and OT enterprise range while a real SOC stack watches. The team that reaches its objectives with the fewest severe detections wins. Up to 12 teams compete, each playing an IT part and an OT part, for the overall cup plus separate IT and OT cups. Detections are shown in real time so teams can adapt their evasion strategy. Resets of infrastructure and scores are possible but cost points.

Ideal team size is 4 to 8 players, with 2 to 4 on each side. The event is designed for professionals with a pentesting background, familiarity with evasion techniques, Windows and OT environments is an advantage. The event runs in English. Technical details and objectives are shared with confirmed teams a few days before the event.

Attack paths and evasion tricks from the event feed into detection research. The 2025 results were published at ACM AsiaCCS 2026. Winners join the StealthCup Hall of Fame and are published on the website, participants can opt for anonymity.

Registration: team registration at https://stealth.ait.ac.at/team-application/, individuals without a team at https://stealth.ait.ac.at/individual-registration/