Real case files, not puzzles
Every challenge is a complete incident with logs, emails, network records and artefacts, built from realistic field scenarios.
Arenaby Cryptonic AreaInvestigate real incidents.
Not just flags.
Open a real case file, work through the evidence inside the app, submit your findings and get reviewed by practitioners.
1Receive case2Investigate3Get reviewed
HomeYour Arena workspace
Aarav SharmaSECURE SESSION
// INVESTIGATOR PROFILE
Aarav Sharma
ph4nt0mActive investigatorSilver Rank
Aspiring SOC analyst. Log hunter. Building my way up the ranks, one case at a time.
Investigator ID
CA-••••••4821
Based inIndia
Arena Network1Cases solved
1Certificates
1Reports filed
4Achievements
Investigator rank
Earned as you progress
Beginner
Bronze
Silver
Gold
Platinum
EliteYour assigned case
ArenaMISSION · CA0001ASSIGNED
The Last LoginCase CA0001 · Account compromise
Rewards
Earned by solving cases
Your rewardsCoupons, reports and perks
2Hands-onReal case learning
1Live challenge
100%Expert reviewed
What is Arena
Beyond CTFs. Real investigations.
A normal CTF asks you to find a flag. Arena hands you a real incident, the evidence behind it and one job: work out what actually happened.
Investigate end to end
Reconstruct the timeline, identify the entry point, scope the impact and document your reasoning like a professional analyst.
Submit your investigation report
Write up your findings, the evidence behind each conclusion and the full attack timeline in a clear, structured report, the way analysts hand over a real case.
Reviewed by security experts
Working practitioners go through your report line by line and send back detailed, actionable feedback so every case makes you sharper.
Earn verifiable recognition
Every completed case is recorded on your Arena profile with proof you can share with recruiters, teams and your professional network.
Your certificate
An industry-grade certificate, earned the real way
Finish a case, submit your investigation and receive a certificate that recognises real analyst work, not just attendance.
- Issued on completionAwarded when you complete a case
- Verifiable proofRecorded on your Arena profile
- Ready to shareShow it to employers and your network
Challenges
Start with our challenges
Real incident investigations built from field scenarios. Pick a challenge, work through the evidence and get your findings reviewed by practitioners.
Account compromise · CA0001
The Last Login
A company account has been compromised. You are handed the evidence from the incident. Establish how the attacker got in, what they touched and when it happened, then report it.
Log analysisEmail headersAccount takeoverTimeline
Challenge access
Special launch price for early learners. It will go up once the offer ends.
- Expert review included
- Verifiable recognition
- Real evidence pack
What is inside the case
- Incident brief with context and your objectives
- Evidence pack: logs, emails, network data
- Report template for a structured submission
- Expert review with feedback on your findings
Launching soon
Data exfiltration · CA0002
Ghost in the Wire
Something has been quietly leaving the network. Step into an interactive investigation, trace the unusual traffic through captures and DNS records, uncover what was taken and how, then prove it with evidence.
Packet analysisDNS recordsData exfiltration
Launching soon
Case CA0002 is being prepared by our practitioners. Access and details will open at launch.
- Interactive investigation
- Expert review included
- Verifiable recognition
What will be inside
- Interactive workspace to explore the evidence
- Network captures and DNS records
- Report template for a structured submission
- Expert review with feedback on your findings
More challenges are coming
New investigation cases will be added in the future.
Your Arena profile
One account. Your full record.
Your Arena ID is issued by our team. Log in to open your profile and dashboard, where every case you take and complete lives in one place.
- Access the case assigned to you
- Track progress on every active investigation
- See your case access and payment details
- Keep submissions, feedback and achievements
Student voices
Hear from those who took the challenge
Read how our earlier students approached a real investigation, and what they took away from it.
FAQ
Good to know
Quick answers about how Arena works, who it is for and how to get started.
A CTF rewards finding a flag. In Arena you receive a full incident with its evidence, investigate it like an analyst and submit a report that our team reviews.
Students, beginners moving into security, and working professionals who want real investigation practice instead of theory.
Cryptonic Area practitioners review your findings, evidence and reasoning, then share feedback on your investigation.
Tap Get into the case, fill in your details and our team will contact you on WhatsApp and email with the next steps. Arena IDs are issued by the team.
Yes. We are launching with Case CA0001 and releasing new investigation tracks regularly.
No. Arena suits beginners and working professionals alike. You start with the evidence and learn the investigation process as you work through the case.
A complete incident with its logs, emails, network records and other artefacts, built from realistic field scenarios.
The Arena team reaches you on WhatsApp and email after you request access, so you can ask questions directly.
Have a question? Feel free to ask.Not sure what to do or how it works? Even if you are a complete beginner, message us on WhatsApp and we will guide you step by step.No technical knowledge needed · Any query about Arena, cases or access
Ready when you are
Your first case is waiting
Request access to Case CA0001 and start investigating.
- Real case files
- Expert review
- Verifiable record