Next level cybersecurity awareness

Turn security struggles into your team's superpower with hands-on, cinematic training.

10
OWASP items
65+
Challenges & Labs
60
Studying hours
1
Major Team Event
Hack the Bank

What is Hack the Bank?

Hack the Bank is a cinematic, hands-on cybersecurity training for DevOps engineers and security enthousiasts. Through our online platform and live sessions, participants step into the role of a hacker to exploit real-world vulnerabilities before learning how to defend against them.

Our "learn by doing" approach blends storytelling, gamification and practical labs that simulate production systems indistinguishable from reality. The result: deep, lasting understanding and a new standard in developer security awareness.

Explore program
What is Hack the Bank?
Showcase

Our Learning Experience

Training
Training contents

Eliminate OWASP-10 & Known Vulnerabilities in your code base

  • Covers all of the OWASP-10 vulnerabilities
  • Advanced Persistent Threats crash course
  • Defensive programming labs for secure coding
  • A top-rated security awareness live session
Real Life Scenarios

Relive the biggest breaches

In Hack the Bank we reconstructed real-world crisis scenarios based on the biggest and wildest hacks of the last decade.

  • The Adobe Breach in 2013 where usernames and passwords were accessed through a SQL Injection Bug in Adobe ColdFusion.
  • The Facebook Bug Bounty Vulnerability in 2014 where users found a XML external entities vulnerability within a PHP page hosted on Facebook servers.
  • The VMware Vulnerability in 2025 where a user could gain database access through a Blind SQL Injection Bug in Avi Load Balancer.

Our simulations of these historic breaches challenge your reflexes and assumptions about cybersecurity. Learn from their mistakes without suffering the real-world consequences these organizations faced.

Sine Nomine Hack

Awareness modules

The Grid

Online Learning Platform

  • OWASP-10 Expert
  • APT: Advanced Threats
  • Injection & XSS
  • Cryptographic Failures
  • Revisit lessons any time

Hack the Bank

Live Session

  • Available at Month 3
  • Includes Food & Drinks
  • Apply and Test Learned Skills
  • Competitive Format
  • Unforgettable experience

Session Only

Hack the Bank — Live Session

Our Live Session is also available separately. Book through our website's self-service portal.

  • Tailored online introduction
  • Self-service booking possible
  • No subscriptions
FAQ

Got a question for us? Read our FAQ to get answers!

Can't find what you are looking for? Contact us

What topics do you cover in Hack the Bank?
We cover critical web security topics including Cross-Site Scripting (XSS), SQL Injection (SQLi), XML External Entity (XXE) attacks, Path Traversal exploits, Prompt Injection, Insecure Deserialization, Insecure Direct Object References (IDOR), and Server-Side Request Forgery (SSRF).
Can we do Hack the Bank privately on-site?
Yes, Hack the Bank can be conducted as a private event within your organization. Please contact us for more details.
Can we do Hack the Bank with more than 24 players?
Yes, Hack the Bank is also designed for large groups and organisations. However, the live session is intended for teams of up to 24 players to ensure a balanced and engaging experience. Larger groups will be split.
Do I need to be a developer to play Hack the Bank?
No, Hack the Bank is designed for all skill levels. Whether you're a developer or not, you can contribute to your team's success. To ensure fairness during the live session, we pair players based on their skill level.