Legal
Rules and eligibility
These rules govern participation in the Cyber Kavach Challenge 2026, organised by PSY9 Security Consulting Pvt. Ltd. and hosted at BSides Ahmedabad. By registering, you and your team agree to these rules.
1. Eligibility
- Open to participants across India who are 18 years of age or older at the time of the event.
- Participants may be students, freshers, working professionals, startups, or product teams.
- Organizers, jury members, and their immediate teams are not eligible to compete.
2. Teams
- Teams must have between two and four members, including the team lead.
- Each person may be part of only one team.
- Each team enters one of two tracks: Students and freshers, or Seasoned and experienced.
- The team lead is the primary point of contact and is responsible for all event communication.
3. Registration
- Registration is free and is done through the official event website.
- Registration closes 23 September 2026 at 3:00 PM IST. See the homepage countdown for the exact opening date.
- All information provided must be accurate. Incomplete or false information may lead to disqualification.
4. Problem statements and selection
- Each team selects one preferred problem statement at registration.
- Shortlisting is at the organizers' discretion, based on the fit between the team and the chosen problem, the relevant skills on the team, and the seriousness of intent.
- Shortlisted teams are confirmed on 24 September 2026 and receive the full problem brief and sample data the same day.
- The organizers may reassign, balance, or adjust problem allocations to keep tracks and problems fairly distributed.
5. Conduct during the event
- All work must be the team's own, created during the event. Pre-built solutions are not allowed. Open-source libraries and public tools are permitted if properly attributed.
- All building and testing must take place in the sandboxed or synthetic-data environments provided. Probing, scanning, or testing against live or production systems is strictly prohibited.
- Teams must follow responsible-disclosure practice and handle all data in a DPDP-compliant way.
- Shortlisted teams will sign conduct, intellectual property, and data agreements before the build begins.
6. Judging
- Solutions are judged within each track against fit and relevance, technical soundness and security rigour, feasibility and deployability, innovation, and demonstration and clarity.
- The jury's decisions are final and binding.
7. Prizes
- In each track: first place receives Cash prize. Second place receives Cash prize. Third place receives Cash prize.
- Prizes are shared within the winning team as the team decides, and are subject to applicable taxes and any tax deducted at source.
- Winners must provide any details reasonably required to process prizes. Prizes are non-transferable and cannot be exchanged for cash.
8. Disqualification
A team may be disqualified for false information, plagiarism or pre-built work, breach of the Code of conduct, testing against live systems, or any conduct that harms the event, other participants, or third parties.
9. Changes
The organizers may change, postpone, or cancel any part of the event, and may update these rules, where reasonably necessary. Material changes will be communicated to registered teams.
10. Governing law
These rules are governed by the laws of India, and disputes are subject to the courts of Ahmedabad, Gujarat.

