SHSelfHostIndex
CT

CTFd

Open-source capture the flag framework for hacking competitions

Game Servers ★ 6.9k stars Medium setup Apache-2.0

CTFd is an easy-to-use, customizable platform for running capture the flag competitions, with challenge management, scoring, teams, and a public scoreboard. It is widely self-hosted for security training events and game-based learning.

Official siteSource code

Key features

  • CTF competition hosting
  • Challenge and team management
  • Live scoreboard
  • Plugin and theme system

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Mature project with 6.9k GitHub stars
  • Written in Python

Is CTFd secure?

No known vulnerabilities affect CTFd's latest release (3.8.8). OSV.dev lists 5 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-78145, published 2026-08-23 (52 days ago)

Source: OSV.dev, checked 2026-10-14. How this is measured.

CTFd replaces

Self-hosted HackerRank CTF alternatives

Health badge

Maintain CTFd? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 93 · excellent

Markdown
[![SelfHostIndex health score for CTFd](https://selfhostindex.com/badge/ctfd.svg)](https://selfhostindex.com/app/ctfd/)
HTML
<a href="https://selfhostindex.com/app/ctfd/"><img src="https://selfhostindex.com/badge/ctfd.svg" alt="SelfHostIndex health score for CTFd"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/ctfd.svg
   :alt: SelfHostIndex health score for CTFd
   :target: https://selfhostindex.com/app/ctfd/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar game servers apps