Competition Overview

​What does a school need to participate?

Each CyberPatriot team requires a coach, usually a teacher or adult leader of a team-sponsoring organization. Coaches do not need to be computer experts. In fact, any teacher or responsible adult leader can effectively lead a team to a fun and successful competition!

A minimum of two ​computers and an Internet connection are required for occasional weekend use during the online portions of the competition. Computer hardware requirements are modest, and most schools already have computers that meet the technical specifications of the competition. Full hardware, software, and technical requirements can be found on the Technical Specifications page. 

NOTE: ALL TEAMS ARE REQUIRED TO HAVE 64-BIT, HOST COMPUTERS AND OPERATING SYSTEMS TO COMPETE SUCCESSFULLY IN CYBERPATRIOT. You may contact the CyberPatriot Program office for more information.

Upon registration, each team receives access to the Microsoft Developers Network Academic Alliance. This allows the team to download a number of operating systems and productivity tools that can be used to prepare for the competition. This benefit alone is worth several thousand dollars. Each registered team member also receives a CyberPatriot participant kit. In previous seasons, this kit has included a CyberPatriot t-shirt, a commemorative coin, an official lapel pin. 

Training materials are provided to get teams started on increasing their cyber knowledge, and there is no course or skill prerequisite for the program. Any student who has an interest in the program can join and be successful. 

Competition basics

Teams compete in three divisions:

  • Open High School Division: Open to all high schools, scouting units, Boys and Girls Clubs, and approved high school home school programs across the country
  • All Service Division: High school JROTC Programs / Civil Air Patrol units / Naval Sea Cadet Corps units
  • Middle School Division: Open to teams of middle school students

The early rounds of the competition are done online during weekends in a six-hour period from the teams' home locations (schools, homes, libraries, etc.). A Coach chooses their team's six-hour competition period.

Prior to the rounds, teams download  "virtual image" representations of operating systems with known flaws, or cybersecurity "vulnerabilities."  Teams must find the flaws while keeping computer functions ("services," such as email) working. Team progress is recorded by a central CyberPatriot scoring system.

For the Open and All Service Divisions, scores from two online qualification rounds are added together to determine team placement into one of three tiers for the State Rounds: Platinum, Gold, and Silver. These tiers have cybersecurity challenges of different degrees of complexity. After the online State Round, the top teams advance to the Regional Rounds for the Open Division. The top six teams in each All Service Division category and several wild Cards advance to the Category Round.

Following the Regional and Category Rounds, the top 12 Platinum tier Open Division teams and top two teams from each All Service Division category plus one Wild Card All Service team advance, all-expenses paid, to the in-person National Finals Competition held at the Hyatt Regency Inner Harbor in Baltimore, Md. There, the Finalists compete face-to-face against other teams in their division to defend virtual networks from a professional aggressor team. Winners of the National Finals are awarded scholarship grants.

The Middle School competition is slightly different. After two qualifying rounds, the top 50% of teams advance to the Semifinals. From there, the top three teams advance to the National Finals Competition.