Arena is not another logs-and-flag challenge. Every case here is a full digital investigation — real evidence, real conflicting signals, and a real incident to reconstruct. You don't submit an answer. You submit your own investigation report, exactly like a working analyst would.
No shortcuts. No AI-generated write-ups. Just you, the case file, and what you can actually prove.
Most "challenges" hand you a log file and ask for a flag. Arena hands you a case.
Not a single log — a complete, realistic evidence package, A to Z.
Every case is built the way a senior investigator would actually hand it off.
You write the findings yourself. No AI shortcuts, no answer box to fill.
Clues that don't line up neatly — you decide what's signal and what's noise.
A certificate and points tied to a real investigation you actually completed.
Reconstruct what happened, connect the clues, and defend your conclusion.
More cases are being built for the Arena — this is the one live right now.
A suspicious login. A compromised account. Conflicting evidence.
Your task is to uncover what really happened.
Analyze the provided digital evidence, reconstruct the incident, connect the clues, and build your own investigation report.
Don't just find the answer. Prove how you found it. 🔐
Unlock the case to begin your investigation.
Points earned from completed cases carry forward as the Arena grows.
Your first case, unlocked and underway.
A handful of cases closed, patterns starting to show.
A track record of reports that hold up under review.
The rank reserved for the Arena's most consistent investigators.
Purchase access to the active case for a one-time fee.
A complete evidence package, briefed the way a senior investigator would hand it off — not a single log.
Analyze the evidence, connect the clues, and reconstruct what actually happened.
Write up your findings and how you reached them — in your own words, your own analysis.
Your report is reviewed against what you profiled, what evidence you used, and how you built your conclusion.
Successful investigations earn a verifiable Cryptonic Area Arena certificate and points.
Every Arena case is built as a realistic incident package — login records, account activity, system artifacts, and conflicting statements, exactly like what a company would hand an investigator on day one.
Nothing is pre-labelled as "important." Figuring out what matters is the investigation.
Every successfully completed case earns a Cryptonic Area Arena investigation certificate — built to be shown, not just kept.
A credential you can add to your resume and LinkedIn as proof of a real investigation, not a course.
Each certificate carries a unique ID, so it can be independently verified as genuinely earned.
Awarded only after your submitted report is reviewed against the actual evidence and findings.
Every completed case adds to your standing as more cases go live in the Arena.
Different fields, different kinds of incidents — new cases will unlock here over time.
Coming soon to the Arena.
Coming soon to the Arena.
Coming soon to the Arena.
No. Arena gives you a full case file — a complete, realistic evidence package — not a single log file and a flag to submit.
No. The case is built to be worked through with a security fundamentals background, and you're evaluated on how you investigate, not on prior case experience.
No. Arena is built to test your own analysis and reasoning. Reports are reviewed by our team around your own investigative work.
Yes. Every submitted report is reviewed, and on successful completion you receive a verifiable Cryptonic Area Arena investigation certificate.
Yes. The Arena is being built out with different cases across different fields — CA/0001 is the first of many.
Anyone can watch a tutorial. Not everyone can sit with real, conflicting evidence and build a case that holds up. The Arena is open now.
Enter The Arena