How Hackle works
Hackle is a cybersecurity capstone project designed around one fresh, safely isolated hacking puzzle each day. The goal is to make ethical security practice approachable, repeatable, and fun.
- 01 // drop
A new target drops at midnight
Every night at 12:00 AM Arizona time, an AI builds a brand-new website (a bakery, a gym portal, a school login) and plants exactly one security flaw in it. Every puzzle is tested automatically and approved by our team before it goes live.
- 02 // recon
Explore it in the sandbox
Hit Play and the target opens right inside the page, walled off on its own domain. Click around, read the source, open dev tools, edit URLs and poke at forms. Nothing you do can reach real sites or other players.
- 03 // exploit
Find the one bug
Somewhere in the site is a single vulnerability: an exposed key, a login you can trick, a search box that leaks the database. Use it to reach the win condition, like breaking into the admin panel. Stuck? Grab a hint.
- 04 // flex
Win, climb, come back tomorrow
Trigger the win and the confetti flies. There’s no answer to type in. Your time counts from the moment you opened the puzzle and goes on today’s leaderboard and your friends’ board. Solve every day to grow your streak.
Safe and legal by design
Isolated
Targets run on a separate domain inside a sandbox, so they can’t touch your accounts or ours.
Legal
You only ever attack a throwaway site we built for you. Never use these tricks on sites you don’t own.
Zero setup
All you need is a browser. No installs, no virtual machines, no special tools.
Want the fine print? Read the rules of engagement.