Computer Science
Security & Cyber Defense Challenges
Security & Cyber Defense challenges put you inside the work of protecting systems from real attack. You'll build skills around the CIA triad, authentication, identity & access management and network security, and learn to work the OWASP Top 10 and run vulnerability scanning the way defenders do.
From there you'll tackle the harder edges — threat modeling, the MITRE ATT&CK framework, SIEM operations and incident response — moving into cyber risk management, Zero Trust architecture and red team operations. Each challenge you solve earns a verified credential you can share with recruiters.
- ResearchSeniorNew
Concept-Activation Vectors for an Autonomous-Vehicle Perception Audit
You receive a trained semantic-segmentation model (8 classes including pedestrian, vehicle, road, sky), an internal validation set of 2,500 driving frames, and a small concept-i…
- Tcav
- Concept Explanations
- Interpretability
Open coursework - AnalysisIntermediateNew
Run a Red-Team Exercise on a Cloud-Native Microservices Platform
Receive a scoped engagement letter (in-scope: 6 microservices and their CI/CD pipelines; out-of-scope: customer-data exfiltration beyond proof-of-access), the architecture diagr…
- Red Teaming
- Kubernetes Security
- Lateral Movement
Computer Systems Security - DesignIntermediateNew
Author a SOC 2-Ready Incident Response Playbook for Kestrel Pay
Using the Kestrel Pay company dossier and the current pinned-message 'playbook' (both provided), author a four-phase playbook — Prepare, Detect & Analyze, Contain/Eradicate/Reco…
- Incident Response
- NIST Sp 800 61
- Security Governance
Open coursework - CodeIntermediateNew
Prompt-Injection Hardening for a Customer-Support Agent
You receive the current agent prompt, the pen-tester's 60-attack injection test set (direct prompt injection, indirect via doc content, refusal-bypass, and exfiltration), and a …
- Prompt Injection Defense
- System Prompt Design
- Red Teaming
Prompt Engineering Practice your coursework on real scenarios.
Every challenge is shaped from real-world context — not generic exercises. The work mirrors what your degree prepares you for.
Why Ewance
- DesignIntermediateNew
Threat-Model and Hardening Proposal for a Whistleblower Intake
Using the current-stack dossier and the CTO mandate brief, build a threat model of the existing intake using the LINDDUN privacy-threat framework (linkability, identifiability, …
- Anonymous Communication
- Threat Modeling
- Tor
Open coursework - ResearchIntermediateNew
Red-Team an Image-Classification Pipeline for a Banking KYC Workflow
You receive the production image classifier as a black-box API plus a labeled validation set of 5,000 ID images. Run untargeted FGSM and PGD attacks (L_inf budget 4/255 and 8/25…
- Adversarial Attacks
- Robust Evaluation
- Red Teaming
Trustworthy AI, Robustness, and Safety - ResearchSeniorNew
Multi-Tenant Vector Isolation for a B2B Knowledge Assistant
Build a small proof-of-concept in your chosen vector store (Pinecone or Qdrant — pick one and justify) that supports 10 simulated tenants with 1,000 vectors each. Implement the …
- Multi Tenant Isolation
- Vector Databases
- Threat Modeling
Open coursework - AnalysisSeniorNew
Forensic Reconstruction of an Anonymized Energy-Grid Incident
Treat this as a case file and work timeline-first. From the incident intake record (intake-file), establish the known facts and the 19-minute window. Reconcile the remote-termin…
- Digital Forensics
- Incident Response
- Ics Security
Open coursework - Browse challenges
Explore role
Product Manager
Ship product that solves real user problems. Combine user research, prototyping, and stakeholder alignment to turn ambiguous briefs into measurable wins — the role at the centre of modern software teams.
- DesignIntermediateNew
Detect and Defend a Government Portal Against Application-Layer DDoS
Working only from the provided incident log sample, architecture overview, and prior-incident case file, design a layered defense and prove it holds up under simulation. Build s…
- Ddos Defense
- Detection Engineering
- Waf
Open coursework - ResearchIntermediateNew
Safety-Test a Customer-Service Agent for Adversarial Prompts
You receive a sandboxed instance of the agent (a tool-using LLM that can read account balances and open support tickets — both mocked). Design a red-team suite of at least 80 pr…
- LLM Agents
- Red Teaming
- Adversarial Prompts
Open coursework - DesignSeniorNew
Design OS-Level Cache Side-Channel Mitigations for a Multi-Tenant Cloud
Using the de-identified disclosure record (the case file) and the three published attack papers provided in the materials, characterize each of the three attacks — Flush+Reload,…
- Os Security
- Side Channels
- Virtualization
Open coursework - DesignIntermediateNew
Threat Model a HealthTech Patient-Portal Web App
Read the 25-page redesign architecture document (auth via Clerk, Next.js front-end, FastAPI backend, Postgres, S3 for documents, webhook integration with EMRs). Build data-flow …
- Threat Modeling
- STRIDE
- Secure Design
Software Security Build a verifiable portfolio.
Submissions become evidence. Reviewers with shipping experience score against a rubric; the result becomes a credential anyone can verify.
Why Ewance
- DesignIntermediateNew
Spec Trust-and-Safety Eval Harness for an LLM-Powered Customer-Support Bot
You will spec a 6-page evaluation harness covering: (1) jailbreak test set (about 200 prompts across 6 attack families), (2) PII-leakage probes (about 100 synthetic-customer pro…
- LLM Evaluation
- Red Teaming
- Pii Detection
Open coursework - DesignIntermediateNew
Design SLO-Driven Alerts for a Telco's Subscriber API
Receive a 90-day RED (Rate, Errors, Duration) metrics export for the subscriber API across 6 endpoints and 38 weeks of paging history. Define an SLO per endpoint (e.g., 99.9 per…
- Slo Design
- Alerting
- Prometheus
Software Observability - DesignBeginnerNew
Threat-Model the Patient-Intake App for a Telemedicine Startup
Working only from the three materials provided — the system architecture overview, the patient-intake data-flow description, and the SOC 2 control-mapping table — produce a STRI…
- Threat Modeling
- STRIDE
- Risk Assessment
Open coursework - ResearchIntermediateNew
Red-Team Evaluation of a Refusal Policy
You receive the lab's written refusal policy (version 2.3) and a starter set of 60 red-team prompts (10 per category). Extend the set to 240 prompts (40 per category) using docu…
- Red Teaming
- Refusal Policy
- Alignment Evaluation
Open coursework - DesignSeniorNew
Design an End-to-End Encrypted Messaging Protocol for Clinicians
Using the Vireo current-architecture case file and the Signal protocol specifications listed in provided materials, design an end-to-end encrypted messaging protocol that covers…
- Applied Cryptography
- Protocol Design
- Rust
Open coursework - DesignIntermediateNew
Security Policy Overhaul for a 40-Person SaaS Scale-Up
You are the new IT security manager. Review current policies (provided in a brief), identify gaps against SOC 2 trust service criteria, and produce a new set of 5 core policies …
- Security Policy Development
- Soc 2 Compliance
- Vendor Risk Management
Open coursework - DesignIntermediateNew
Design a Secure Wi-Fi Onboarding Flow for IoT Devices
Design a BLE-based onboarding protocol: device advertises a service UUID on power-on, the companion app discovers, performs an ECDH key exchange, then encrypts and sends Wi-Fi S…
- Link Layer Protocols
- Ble
- Secure Onboarding
Computer Networks - AnalysisSeniorNew
Cyber-Physical Security Audit for a Connected-Building HVAC System
Audit one representative tower's BMS: enumerate BACnet devices (network discovery + capability inventory), identify lateral-movement paths (tenant wifi -> guest network -> BACne…
- Cyber Physical Systems
- Ot Security
- Risk Management
Internet of Things and Cyber-Physical Systems - ResearchSeniorNew
Audit a Custom Cryptographic Protocol
Read the 22-page protocol spec, the Go reference implementation (around 4,000 lines), and the test vectors. Run a structured review covering: primitive choices (which cipher, MA…
- Applied Cryptography
- Cryptographic Audit
- Protocol Analysis
Applied Cryptography - DesignSeniorNew
Design a Confidential-Computing Architecture for a Genomics Workflow
Receive the workflow description (per-hospital genome BAM files uploaded to S3, processed by a variant-calling pipeline, results returned per-hospital), the partner-hospital leg…
- Confidential Computing
- Remote Attestation
- Secure Architectures
Computer Systems Security - DesignIntermediateNew
Authentication + RBAC for a Multi-Workspace SaaS
Design the auth architecture: identity provider (managed), session model (JWT with rotation), workspace-membership claims, RBAC permission model (4 default roles, custom-role ca…
- Authentication
- Rbac
- Sso
Engineering Software as a Service - ResearchIntermediateNew
Audit an Agentic Workflow for Safety Failures
Read the system's existing capability spec + tool-allow-list. Design 50+ adversarial inputs across categories: prompt-injection, tool-confusion, scope-escape (agent does somethi…
- Ai Red Teaming
- Agent Safety
- Prompt Injection
Multi-Agent Systems
How it works
From brief to credential, in six steps.
Step 01
Browse challenges aligned to your studies.
Step 02
Accept the one that fits your goals.
Step 03
Work through it with AI Copilot guidance.
Step 04
Submit for structured evaluation.
Step 05
Earn a verified credential.
Step 06
Add it to LinkedIn with one click.
Related skill families
Browse all skillsIndustry teams behind a decade of practitioner briefs
Hiring from this pool?
Sponsor a challenge and meet candidates through actual work.
Industry teams can shape briefs around the skills they hire for, then evaluate students on rubric-scored deliverables — not resumes.



















































































