picoCTF
Free Carnegie Mellon CTF learning platform, now the CyLab Security Academy, for students and educators.
Technical Architecture & Overview
picoCTF is Carnegie Mellon University's educational CTF platform. It started as a competition for high school students and now offers self-paced challenges, learning paths, classrooms, and timed competition events across areas such as forensics, cryptography, web exploitation, binary exploitation, and reverse engineering. picoctf.org is now the CMU CyLab Security Academy; picoCTF accounts created before May 8, 2026 still work, with progress and history intact. It remains free for learners.
Targeted Technical Use Cases
Students and educators looking for a structured, free introduction to capture-the-flag problem solving.
Evaluation & Trade-offs
Core Strengths
- +Educational design by a university security team.
- +Broad problem coverage across CTF categories.
- +Free with no hardware requirements.
Trade-Offs & Limitations
- -Platform moved to the CyLab Security Academy portal in 2026.
- -Challenges are bite-sized problems rather than full lab networks.
Defensive Security Application
Pipeline building for future security hires through early CTF exposure.
Frequently Asked Questions
What is picoCTF?→
picoCTF is Carnegie Mellon University's educational CTF platform. It started as a competition for high school students and now offers self-paced challenges, learning paths, classrooms, and timed competition events across areas such as forensics, cryptography, web exploitation, binary exploitation, and reverse engineering. picoctf.org is now the CMU CyLab Security Academy; picoCTF accounts created before May 8, 2026 still work, with progress and history intact. It remains free for learners.
What is picoCTF used for?→
Students and educators looking for a structured, free introduction to capture-the-flag problem solving.
What are the strengths of picoCTF?→
- +Educational design by a university security team.
- +Broad problem coverage across CTF categories.
- +Free with no hardware requirements.
What are the limitations of picoCTF?→
- +Platform moved to the CyLab Security Academy portal in 2026.
- +Challenges are bite-sized problems rather than full lab networks.
How is picoCTF used defensively?→
Pipeline building for future security hires through early CTF exposure.