Skip to content

Agentic security / 2026

Follow the signal.
Break the boundary.

Agents act, delegate, and remember. Explore the trust boundaries behind their decisions through tools, state changes, and verifiable evidence.

Enter Operation Sidequest Switch CTF track

ASI01 · 0/3 ranked

Agent Goal Hijack

Foundation · attacker · 150 ptsOperation SidequestReady to play Advanced · attacker · 300 ptsThe Calendar DetourReady to play Expert · attacker · 500 ptsMission RewriteReady to play

ASI02 · 0/3 ranked

Tool Misuse & Exploitation

Foundation · attacker · 150 ptsRefund RouletteReady to play Advanced · attacker · 300 ptsExport EverythingReady to play Expert · attacker · 500 ptsCleanup CrewReady to play

ASI03 · 0/3 ranked

Identity & Privilege Abuse

Foundation · attacker · 150 ptsBorrowed BadgeReady to play Advanced · attacker · 300 ptsTenant Next DoorReady to play Expert · attacker · 500 ptsDelegation LadderReady to play

ASI04 · 0/3 ranked

Agentic Supply Chain Vulnerabilities

Foundation · attacker · 150 ptsPoisoned PluginReady to play Advanced · attacker · 300 ptsTool SwapReady to play Expert · attacker · 500 ptsTrusted Name, Wrong AgentReady to play

ASI05 · 0/3 ranked

Unexpected Code Execution (RCE)

Foundation · attacker · 150 ptsExpression TroubleReady to play Advanced · attacker · 300 ptsNotebook EscapeReady to play Expert · attacker · 500 ptsBuild Hook AmbushReady to play

ASI06 · 0/3 ranked

Memory & Context Poisoning

Foundation · attacker · 150 ptsRemember MeReady to play Advanced · attacker · 300 ptsThe False RunbookReady to play Expert · attacker · 500 ptsContext LaunderingReady to play

ASI07 · 0/3 ranked

Insecure Inter-Agent Communication

Foundation · attacker · 150 ptsForged HandoffReady to play Advanced · attacker · 300 ptsReplay WindowReady to play Expert · attacker · 500 ptsRelay TamperReady to play

ASI08 · 0/3 ranked

Cascading Failures

Foundation · attacker · 150 ptsBad SignalReady to play Advanced · attacker · 300 ptsRetry StormReady to play Expert · attacker · 500 ptsConsensus CollapseReady to play

ASI09 · 0/3 ranked

Human-Agent Trust Exploitation

Foundation · defender · 150 ptsApproval MirageReady to play Advanced · attacker · 300 ptsConfidence TheaterReady to play Expert · attacker · 500 ptsBait-and-Switch ApprovalReady to play

ASI10 · 0/3 ranked

Rogue Agents

Foundation · defender · 150 ptsOff-MissionReady to play Advanced · defender · 300 ptsHidden WorkerReady to play Expert · defender · 500 ptsShutdown EvasionReady to play

Threat taxonomy: OWASP Top 10 for Agentic Applications 2026. Missions are independently authored training scenarios.