Your surface
Against your product
We run against your APIs, agents, and models — not a generic CTF box.
Scorton Hack · Hackathon · CTF · Bug bounty · Paris · San FranciscoScorton Hack · Hackathon · CTF · Bug bounty · Paris · San FranciscoScorton Hack · Hackathon · CTF · Bug bounty · Paris · San FranciscoScorton Hack · Hackathon · CTF · Bug bounty · Paris · San Francisco
Hackathon · CTF · Bug bounty · Show events
Scorton Hack
Stress-test your AI stack
Put your product in front of builders who will try to break it, hire from the ones who succeed, and train your models and agents on what they find.
On your calendarScoped to your stack
Who it's for
Five doors into Scorton Hack
Pick your seat — company, builder, campus, expert, or partner.
The program
Formats inside Scorton Hack
Hackathons, CTFs, bug bounties, and the events around them — one product scoped to cyber resilience, talent, and model training. Open Source Track is one program inside this umbrella.
- 1
Hackathon
Your product, APIs, and agents as the brief. Teams ship exploits, patches, and evals — production mechanisms, not pitch decks.
- 2
CTF
A scoped capture-the-flag against your threat model. The scoreboard is a resilience report your board can read.
- 3
Bug bounty
Rules, triage, payouts, disclosure. Continuous pressure on the same surface the hackathon and CTF already mapped.
- 4
Show events
Breakfasts and a closed debrief. The CISO/CTO room meets the operators. Hiring happens while findings are warm.
Why Scorton Hack
Resilience you can watch happen
Your stack is how the world actually runs — models, agents, deps, infra. A tabletop is not a test. Scorton Hack is: live attackers, live bounties, live training signal for the models and agents you ship.
Request a scoping call72h
live attack window
1
brief your CISO signs
3
signals: resilience · talent · training data
Run by Scorton
Paris · San Francisco
Who
Scorton · Assurance Runtime
Scorton designs, audits, and secures hybrid AI infrastructures. We deploy agents and skills with control over data, models, and dependencies — then measure operational and financial impact.
Scorton Hack is how that assurance shows up live: we design the challenge, run the room, and hand you evidence — findings, hires, and eval sets. Co-founded by Bacely YoroBi and Dr Florent Pasquier. Paris · San Francisco.
5
PhDs
8
Nationalities
30
Fellows
1.2k
On X
« There is only one thing stronger than all the armies of the world: and that is an idea whose time has come. »
Operator bases
Paris and San Francisco
One operator network. You pick the city; Scorton runs the format.
Along the way
Events around the attack
Breakfast, soirée, and briefings are where CISOs hire and CROs debrief.
Engagement
Four outcomes a CISO, CTO, or CRO actually buys
One challenge, four results. Scorton Hack is useful to builders, visible to risk leaders, and scoped to the stack you ship.
Resilience
Real attempts on your threat model, with a report you can take upstairs.
Talent
Hire from the scoreboard, not a résumé pile.
Eval data
Traces, write-ups, and patches become training signal for models and agents.
Proof
Verified work produced by the challenge — the moat, not the event itself.
Find
Vulnerabilities
Before production, or before the next customer security review.
Find
Talent
The person who won the CTF is already trained on your stack.
Find
Eval data
Bounty + hackathon output becomes the next red-team and the next fine-tune.
A practical activation plan
Before
- Phase 1
Threat-model alignment, rules of engagement, prize and bounty table.
- Phase 2
Asset pack, brief sign-off, and operator invite list.
Onsite
- Phase 3
Hackathon, CTF, and live events. Scorton runs ops; your team watches the board.
After
- Phase 4
Triage, bounty continuity, talent intros, and training-set handoff.
Engagement packs + custom activations
Challenge · Campaign · Full Track
Outcome-named packs — not medal tiers. Co-design the surface under attack. Private enterprise challenges from $10K.
Full Track
$5,000
Full loop: hackathon, CTF, bounty, both events, and evidence pack.
- Hackathon
- CTF
- Bug bounty
- Breakfast
- Soirée
- Content
Campaign
$2,500
CTF and bounty with one operator event and a focused debrief.
- Hackathon
- CTF
- Bug bounty
- Breakfast
- Soirée
- Content
Challenge
$1,000
One format — CTF or hackathon — plus a scoping briefing.
- Hackathon
- CTF
- Bug bounty
- Breakfast
- Soirée
- Content
| Workstream | Proposed role | Working delivery | Success signal |
|---|---|---|---|
| Hackathon | Challenge owner | Brief + judging | Artifacts / hires |
| CTF | Threat-model owner | Flags + scoreboard | Findings |
| Bug bounty | Program owner | Triage + payouts | Closed vulns |
| Breakfast | Operator host | Day-2 gathering | Conversations |
| Soirée | Closed room | Invite-only debrief | Intros |
| Content | Evidence pack | Recap + evals | Assets |
The Breakfast
Operators’ breakfast
A morning gathering for CISOs, CTOs, Chiefs of Risk, and the people who just scored on your CTF. Coffee, demos, and hiring conversations while findings are still warm — not a generic networking slot.
The Soirée
Closed debrief
A private, invitation-only evening for findings, talent intros, and next bounty scope. Founders, CISOs, CTOs, and operators — curated conversations beyond the scoreboard. Attendance is limited and reserved for approved guests.
1
Signed brief
your CISO or CRO owns the threat model before day one.
3
Formats you can sponsor
hackathon, CTF, and bug bounty — alone or as one campaign.
N
Operators in the room
Scorton fills it; you own the brief and the follow-up.
Practical details
Frequently asked questions
Scorton Hack
Your stack. Our room. Real pressure.
Hackathons, CTFs, bug bounties, and the events along the way — scoped for teams that need resilience, talent, and training signal.