About this event
ZeroDay.Cloud — The Largest Cloud Security Hacking Competition 🔐☁️
About ZeroDay.Cloud
ZeroDay.Cloud is a first-of-its-kind, large-scale cloud hacking competition focused on uncovering zero-day vulnerabilities in core open-source software that powers the cloud. The event gathers top security researchers worldwide to identify critical bugs, help vendors patch them, and secure cloud infrastructure.
This competition represents a major industry effort to improve cloud security and is recognized as one of the largest cloud hacking contests ever held.
Challenge Categories
Researchers can submit exploits across six technical domains:
- AI: Ollama, vLLM, NVIDIA Container Toolkit (Container Escape)
- Kubernetes & Cloud-Native: Kubernetes API Server, Kubelet Server, Grafana, Prometheus, Fluent Bit
- Containers & Virtualization: Docker, Containerd, Linux Kernel (Ubuntu)
- Web Servers: nginx, Apache Tomcat, Envoy, Caddy
- Databases: Redis, PostgreSQL, MariaDB
- DevOps & Automation: Apache Airflow, Jenkins, GitLab CE
Goals & Submission Guidelines
- Deliver exploits that demonstrate full container or VM escapes for virtualization, or 0-click remote code execution (RCE) vulnerabilities for other targets.
- Participants may submit for multiple targets but only one entry per target is allowed.
- Approved exploits are demonstrated live on stage at the event.
- Submissions must be made through the HackerOne platform by December 1, 2025, after completing ID verification and tax documentation.
Prizes & Recognition
- Bug bounties range from $10,000 to $300,000 depending on severity and target.
- Winners receive generous cash rewards and recognition from Wiz Research and cloud service provider partners.
Judging & Demonstrations
- Exploits are judged by Wiz Research and partners, judged for impact, sophistication, and originality.
- Live demonstrations provide real-time validation and community engagement.
Join ZeroDay.Cloud to test your cloud security expertise, compete for a multi-million dollar prize pool, and help secure the world’s most critical cloud infrastructure!