Content engineering
Labs and challenges people finish and remember
We build CTF challenges, vulnerable labs and training environments for teams that need hands on practice rather than slides.
300+ labs and 100+ challenges built to date.
What clients say.


Roman Bohuk
Co-Founder & CEO, SkillBit (Formerly MetaCTF)
"OsmSec delivered well-written learning content for us with impressive quality. Their team was highly responsive throughout the engagement. They're easy to work with and very reliable."


Csaba Virág
Head of Strategic Cyber Programs, Cyber Ranges
"Working with the OsmSec team has been a consistently positive experience. They combine solid content development capabilities with excellent responsiveness, flexibility, and a collaborative approach that makes working with them easy."


Victor Slavov
Co-Founder, CTFbazaar
"OsmSec delivered high-quality, engaging challenges that really contributed to our project. The entire process was smooth, professional, and incredibly quick. Working with them was a breeze, and we highly recommend their services to anyone looking for top-notch CTF content."
What we build
CTF challenges
Standalone challenges with a clear path to the flag and no unintended shortcuts.
Vulnerable labs
Boxes built around a real vulnerability class, with an intended path from foothold to root.
Training environments
Multi host ranges for courses, onboarding and internal upskilling.
Course content
The written material around the labs: briefs, hints and instructor notes.
What you get
Challenges with a working flag
Each one is solved end to end before it ships, and the intended path is documented.
A difficulty spread
A mix that keeps beginners moving without going flat for people who already know the basics.
Content you can rebuild
Flag handling and deployment notes you can keep running after handover.
Handover notes
How to deploy it, how to reset it and who to call when something breaks.
Use cases
Capture the Flags
Cyber Ranges
AI Benchmarking
Questions we get asked
Who writes the challenges?
The same people who test applications and networks. Most of our content starts as something we found on an engagement.
Can you work inside our platform?
How long does a lab take?
What if a challenge breaks later?
Need content for a course or a CTF?
Tell us the audience and the platform, and we will come back with a plan for the set.