European CyberSecurity Challenge (ECSC)

Europe's leading cybersecurity competition for young talent.

Discover, develop and showcase your cybersecurity skills in a high-level technical environment. Become a member of the Spanish National Team and compete against Europe's best teams.

What is the European Cybersecurity Challenge (ECSC)?

The European Cybersecurity Challenge (ECSC) is Europe's leading cybersecurity competition for young talent, organised by the European Union Agency for Cybersecurity (ENISA).

Its aim is to identify, develop and promote the most promising young cybersecurity professionals from participating countries, connecting them with the European ecosystem of education, innovation and employment opportunities.

The competition follows a Capture The Flag (CTF) format, in which participants tackle technical challenges simulating real-world professional scenarios. Beyond the competition itself, the ECSC serves as a meeting point connecting emerging talent with European training, research and industry networks.

Who is the ECSC for?

The ECSC is aimed at young people aged 18 to 25 who have an interest in and aptitude for cybersecurity and wish to develop their skills in a challenging, high-level technical environment.

We are looking for individuals with:

Strong motivation and a willingness to learn.
Critical and analytical thinking skills.
An interest in both offensive and defensive cybersecurity.
The ability to work as part of a team.

Taking part in the ECSC is a unique international experience, combining advanced training, competition and networking opportunities with other young cybersecurity experts from across Europe.

What is the competition like?

The ECSC is a team-based technical competition that tests participants' knowledge in key areas such as:

Cryptography.
Reverse engineering.
Vulnerability exploitation.
Web security.
Miscellaneous.

The challenges combine Red Team (attack) and Blue Team (defence) activities, developing both technical skills and the ability to work as a team and make decisions under pressure.

Each edition is designed by the host country in collaboration with ENISA, incorporating new challenges and innovative formats.

INCIBE's role

At INCIBE, we lead Spain's participation in the ECSC and are responsible for:

Defining the eligibility criteria.
Designing and managing the national selection process.
Providing technical training to candidates.
Supporting and preparing the national team.
Representing Spain on the ECSC Steering Committee.

Our commitment is to foster national talent and strengthen Spain's position as a leading European cybersecurity player.

Commitment to equality

One of the ECSC's strategic pillars is promoting equal opportunities and encouraging more women to pursue careers in cybersecurity. In this context, INCIBE has, for the first time, established two parallel competitions, one for women and one for men, bringing together students with the highest scores in technical CTF-style challenges. This model ensures that selection is based on the principles of equality, merit and ability, guaranteeing balanced representation of national talent and equal opportunities for men and women.

Benefits of taking part

Participating in the ECSC gives you the opportunity to:

Access advanced technical training.
Gain hands-on experience in real-world scenarios.
Receive specialised mentoring.
Expand your international professional network.
Enhance your career prospects and employability.

Frequently Asked Questions:

Who can participate?

Young people aged 18 to 25 inclusive who are interested in cybersecurity.

Is there an entry fee?

No. Participation is completely free of charge.

How can I participate?

The participation rules for each edition will be published in advance, setting out the eligibility requirements, conditions and registration and selection procedures. Anyone wishing to participate must accept these rules in order to complete their registration and take part in the selection process. All edition-specific information will be provided in the relevant rules.

What types of challenges will participants face?

Blue Team and Red Team challenges involving ethical hacking, penetration testing, cryptography, digital forensics, web security and teamwork.

What language is the competition held in?

The official language of the ECSC is English. National training sessions are conducted in Spanish.

Where can I follow the latest news and updates?

On the official ECSC website and through our social media channels.

Previous editions

Discover the journey of the Spanish National Cybersecurity Team in the European Cybersecurity Challenge through previous editions. Each competition reflects the dedication, preparation and talent of the young people who have represented Spain at this European event.