Computer & Information Sciences
Cyber Security Challenges
Real cyber-security challenges on Ewance — assess risk, harden systems, and respond to threats the way a working security professional does. Solve them to build a portfolio of verified, recruiter-checkable proof you can do the work — not just describe it.
Recommended challenges
- AnalysisIntermediateNew
Run a Red-Team Exercise on a Cloud-Native Microservices Platform
Receive a scoped engagement letter (in-scope: 6 microservices and their CI/CD pipelines; out-of-scope: customer-data exfiltration beyond proof-of-access), the architecture diagr…
- Red Teaming
- Kubernetes Security
- Lateral Movement
Computer Systems Security - CodeIntermediateNew
Implement Federated Learning for a Government Statistics Office
Use Flower as the FL framework. Simulate 8 municipalities each with a partition of a synthetic wage dataset (provided, 1M rows, EU-Labour-Force-Survey schema). Train a gradient-…
- Federated Learning
- Differential Privacy
- Python Programming
Privacy-Enhancing Technologies - CodeIntermediateNew
Harden a Linux Container Runtime Against Privilege Escalation
Receive the pen-test report (with attack chain), the current cluster config (EKS 1.29, default Amazon Linux 2023 worker nodes), and 3 representative workload classes (web API, a…
- Os Security
- Linux Hardening
- Apparmor
Open coursework - DesignBeginnerNew
Threat-Model the Patient-Intake App for a Telemedicine Startup
Working only from the three materials provided — the system architecture overview, the patient-intake data-flow description, and the SOC 2 control-mapping table — produce a STRI…
- Threat Modeling
- STRIDE
- Risk Assessment
Open coursework Practice your coursework on real scenarios.
Every challenge is shaped from real-world context — not generic exercises. The work mirrors what your degree prepares you for.
Why Ewance
- DesignIntermediateNew
Threat-Model and Hardening Proposal for a Whistleblower Intake
Using the current-stack dossier and the CTO mandate brief, build a threat model of the existing intake using the LINDDUN privacy-threat framework (linkability, identifiability, …
- Anonymous Communication
- Threat Modeling
- Tor
Open coursework - DesignSeniorNew
Design a Confidential-Computing Architecture for a Genomics Workflow
Receive the workflow description (per-hospital genome BAM files uploaded to S3, processed by a variant-calling pipeline, results returned per-hospital), the partner-hospital leg…
- Confidential Computing
- Remote Attestation
- Secure Architectures
Computer Systems Security - CodeBeginnerNew
Implement Authentication and Access Control for a Civic Portal
Receive the current Next.js + Express prototype, the data model (residents, requests, documents, audit log), and the 4 staff roles (resident, clerk, supervisor, auditor) with th…
- Authentication
- Authorization
- Rbac
Introduction to Computer Security - DesignSeniorNew
Design an End-to-End Encrypted Messaging Protocol for Clinicians
Using the Vireo current-architecture case file and the Signal protocol specifications listed in provided materials, design an end-to-end encrypted messaging protocol that covers…
- Applied Cryptography
- Protocol Design
- Rust
Open coursework - Browse challenges
Explore role
Product Manager
Ship product that solves real user problems. Combine user research, prototyping, and stakeholder alignment to turn ambiguous briefs into measurable wins — the role at the centre of modern software teams.
- AnalysisBeginnerNew
GDPR Article 25 Privacy-By-Design Review for a HealthTech API
Review the API specification (OpenAPI 3, provided, 42 endpoints). For each endpoint: identify data categories handled (special-category health data, identifiers, traffic data), …
- GDPR
- Privacy By Design
- API Design
Privacy-Enhancing Technologies - AnalysisBeginnerNew
Exploit and Remediate Eight Web Flaws on a FinTech Practice Range
Using the eight challenge specifications in the provided challenge specification brief and the representative Rails module in the provided vulnerable application source bundle (…
- Web Security
- OWASP Top 10
- Penetration Testing
Open coursework - AnalysisIntermediateNew
Privacy Posture Review of a Fintech's Internal Service Mesh
Work only from the four supplied materials: the anonymized service inventory, the sample east-west traffic flow records, the current mesh policy export, and the public Istio sec…
- Network Privacy
- Mtls
- Service Mesh
Open coursework - AnalysisIntermediateNew
Threat Model a Water-Utility SCADA Network Before a Migration
Review provided network diagrams (current and proposed), the asset inventory (around 180 PLCs (programmable logic controllers), 22 engineering workstations, 6 historian servers)…
- Threat Modeling
- Ics Security
- Scada
Cyber-Physical and Cybercrime Topics Build a verifiable portfolio.
Submissions become evidence. Reviewers with shipping experience score against a rubric; the result becomes a credential anyone can verify.
Why Ewance
- AnalysisIntermediateNew
Build a Risk Register for a Cross-Border Healthcare Provider
Run 8 structured interviews (CISO, IT director, clinical-systems lead, DPO, 4 clinic managers) to surface the top risk candidates. Map each risk against NIST SP 800-30 (threat s…
- Risk Management
- NIST Sp 800 30
- Security Governance
Open coursework - ResearchBeginnerNew
Ransomware Underwriting Brief for a Zurich Cyber Insurer
Using the underwriting mandate brief, the initial-access listing sample, the Ransomware.live tracker, and the public CISA cybersecurity advisories provided, produce a quarterly …
- Threat Intelligence
- Cybercrime Economy
- Ransomware
Open coursework - CodeSeniorNew
Tune an Intrusion-Detection Rule Pack for Manufacturing PLCs
Work entirely from the five provided materials. Using the packet captures (M1) and the labeled event manifest (M2), characterize normal Modbus/TCP and Ethernet/IP behavior for t…
- Intrusion Detection
- Ics Security
- Suricata
Open coursework - DesignIntermediateNew
Detect and Defend a Government Portal Against Application-Layer DDoS
Working only from the provided incident log sample, architecture overview, and prior-incident case file, design a layered defense and prove it holds up under simulation. Build s…
- Ddos Defense
- Detection Engineering
- Waf
Open coursework - CodeIntermediateNew
Implement Authenticated Encryption for a Document Service
Design the envelope-encryption hierarchy: customer Key Encryption Key (KEK) held in AWS KMS (Key Management Service), Data Encryption Keys (DEKs) wrapped per document. Use AES-2…
- Applied Cryptography
- Aead
- Key Management
Applied Cryptography - StrategyBeginnerNew
Build a Tiered Vendor-Security Review Program, Validated by a 12-Vendor Pilot
Using the de-identified subprocessor inventory and the twelve-vendor pilot dossier provided, design a three-tier risk program (critical, important, low-risk) with explicit, obse…
- Third Party Risk
- Security Governance
- Compliance
Open coursework - CodeSeniorNew
Reverse-Engineer and Patch an N-Day Vulnerability in a Vendor Binary
Receive the vulnerable binary (Linux ELF, x86-64), the public CVE-2025-XXXX advisory + PoC, and the bank's deployment context (RHEL 9, the binary runs as a non-root service). Lo…
- Reverse Engineering
- Binary Exploitation
- Ghidra
Open coursework - DesignIntermediateNew
Author a SOC 2-Ready Incident Response Playbook for Kestrel Pay
Using the Kestrel Pay company dossier and the current pinned-message 'playbook' (both provided), author a four-phase playbook — Prepare, Detect & Analyze, Contain/Eradicate/Reco…
- Incident Response
- NIST Sp 800 61
- Security Governance
Open coursework - StrategySeniorNew
Post-Quantum TLS and PKI Migration Plan for a Cross-Border Bank
Working only from the materials provided, complete three connected tasks. First, using the anonymized TLS endpoint inventory and the PKI hierarchy diagram, score all endpoints o…
- Tls
- Pki
- Post Quantum Cryptography
Open coursework - AnalysisBeginnerNew
Wireless Security Audit and Hardening for a Telco's Public Wi-Fi
Your analysis task is built entirely on three provided materials: the 80-access-point configuration inventory, the 30-day authentication (RADIUS) log extract for those same acce…
- Wireless Security
- Wpa3
- Eap
Open coursework - CodeIntermediateNew
Static Analysis SAST Rollout on a Fintech Codebase
Run baseline scans with Semgrep + SonarQube + Snyk Code across all 18 services. Triage the initial findings (likely 800-1,500 raw alerts) into true-positive / false-positive / i…
- Sast
- Semgrep
- Sonarqube
Open coursework - AnalysisIntermediateNew
Privacy-by-Design Review for a Smart-City Data Platform
Map the new module's end-to-end data flow (sensors -> ingestion -> analytics -> dashboards -> exports). Run a Privacy Impact Assessment against OECD privacy principles + per-ten…
- Privacy By Design
- Privacy Regulation
- Compliance
Information Security Management and Governance
How it works
From brief to credential, in six steps.
Step 01
Browse challenges aligned to your studies.
Step 02
Accept the one that fits your goals.
Step 03
Work through it with AI Copilot guidance.
Step 04
Submit for structured evaluation.
Step 05
Earn a verified credential.
Step 06
Add it to LinkedIn with one click.
Industry teams behind a decade of practitioner briefs
Hiring from this pool?
Sponsor a challenge and meet candidates through actual work.
Industry teams can shape briefs around the skills they hire for, then evaluate students on rubric-scored deliverables — not resumes.