A renowned international competition for cybersecurity experts
When
May 21–24, 2025
Wiki Standoff 15
Everything you need to know about the cyberbattle
Join the legendary cyberbattle for four epic days
Red teams
Blue teams
The application period is now over. If you have any questions about participation, please contact us at redteam@standoff365.com.
The application period is now over. If you have any questions about participation, please contact us at blueteam@standoff365.com

Standoff 15 winner

Russia
Standoff 15 wrap-up

Red teams ranking

Place
Team
Number of attacks triggered
Points
1
38
195 388
2
33
127 466
3
28
103 870
4
27
101 128
5
29
97 893
6
23
89 219
8
14
58 540
9
18
51 586
10
16
47 637
11
16
47 305
12
11
46 780
13
15
43 534
14
14
42 925
15
13
40 972
16
15
40 809
17
13
35 250
18
12
29 908
19
9
24 415
20
2
18 387
21
4
16 009
22
6
15 700
23
4
11 407
24
2
8 328
25
2
7 300
28
0
2 300
29
0
1 900
30
0
1 700

Blue teams results

Team
Attacks investigated
Detected incidents
Average incident detection time
7 h 5 min
21
70 of 134
1 h 15 min
132
51 of 68
51 min
109
5 of 85
3 h 29 min
190
46 of 68
17 min
98
25 of 85
1 h 33 min
121
39 of 68
In addition to investigating incidents, the team can fend off attacks, such as by blocking accounts and infrastructure hosts.
Cyberbattle schedule
The cyberbattle will be held in Moscow, "Luzhniki", Standoff zone. All times are given in UTC+3.
Entrance for cyberbattle participants only
May 21
Cyberbattle day 1
Red teams
10:00–20:00
Attack time
Blue teams
10:00–20:00
Investigation and response
Entrance for visitors with tickets
May 22
Cyberbattle day 2
Red teams
10:00–20:00
Attack time
Blue teams
10:00–20:00
Investigation and response
Entrance for visitors with tickets
May 23
Cyberbattle day 3
Red teams
10:00–20:00
Attack time
Blue teams
10:00–20:00
Investigation and response
Entrance for visitors with tickets
May 24
Cyberbattle final
Red teams
10:00–14:00
Attack time
15:00
Report submission deadline
Blue teams
10:00–14:00
Response
10:00–17:00
Investigation and report submission deadline
19:30
Cyberbattle results and awards ceremony
Venue: KULIBIN Popular Science Stage
The Standoff Cyberbattle is...
A hyperrealistic cybersecurity competition where you can supercharge your skills in just four days by engaging with replicas of IT systems and infrastructures used in different sectors.
Application period for red teams is over
Join our server so that you don't miss the selection for the next cyberbattle.
Join our server so that you don’t miss the selection for the next cyberbattle.
Application period for blue teams is over
Since 2016
the international cyberbattle Standoff has been an annual event
5,000+
cybersecurity experts from all over the globe have already taken part in Standoff
500+
companies have improved their cyber resilience by having their teams participate in the battle
Four days of attacks and investigations
with replicas of IT systems
The cyberbattle takes place in a specially designed virtual space called State F
which emulates operational and business processes typical of different sectors: IT, banking, oil and gas, energy, and more
The battle features real PLC and SCADA systems
enabling participants to level up in lifelike conditions
Sectors to hack 'n' defend
Witness the most dangerous red team attacks live
For each cyberbattle, we set up a physical 3D model of state infrastructure that shows the impact of attacks carried out by red teams in real time.
Technological Partners

The Standoff Сyberbattle is made possible thanks to the efforts of a huge team of industry experts, including contributions from our partners
eKassir
Software developer for banks and financial institutions
SafeTech
Developer of innovative solutions for protecting remote banking systems and e-document management systems
Digital Solutions
Russian developer and manufacturer of network equipment for information security
NTI Center at MPEI
Russian developer of Intelligent Power System Protection and Automation Solutions
Participation in Standoff Cyberbattle
This year, eKassir will showcase two software solutions at Standoff 15 Cyberbattle, designed to streamline and enhance payment processing for financial institutions (banks, marketplaces, payment providers, etc.).

eKassir Payments Hub
A software solution for unified payment acceptance across multiple customer service channels, including ATMs, bank branch tellers, agent networks, internet banking, mobile apps, and more. The platform enables centralized routing, processing, and monitoring of payment transactions, ensuring high fault tolerance and scalability.

eKassir Fast Payments System Adapter
An out-of-the-box solution for banks to integrate with all functionalities of the national Fast Payments System (FPS). It supports all existing payment scenarios, including refunds, dispute resolution, and cross-border transfers.

Both products incorporate Access Management and API Gateway systems to ensure security, handling remote authentication of external requests and secure API-based data routing. Access is granted via secure access tokens.
Company overview
eKassir is a Russian software developer for banks and financial institutions, operating in the market since 2003. The company specializes in solutions for managing ATMs and self-service kiosks, as well as for building payment and transactional systems. eKassir’s portfolio includes ready-made "out-of-the-box" solutions for integrating with the Fast Payments System (FPS), Digital Ruble Platform, and implementing Open APIs.

The company’s flagship product, Digital Banking Platform 2.0 RUS, consolidates all eKassir solutions into a unified platform. It features front-end applications for customers and back-end modules that handle business logic, scalable integration with bank back-office systems, and support for any omnichannel scenarios. The platform-based approach accelerates the launch of new services, ensures a seamless customer experience across all service channels, and enables flexible development of digital offerings.

eKassir’s solutions are used by several major Russian banks, including Gazprombank, Promsvyazbank, Sinara Bank, Rosselkhozbank, and others. The company’s software is certified for compliance with PA-DSS, EMVCo, and the latest payment security standard, PCI SSF.
Participation in Standoff Cyberbattle
For the Standoff Сyberbattle, the company has unveiled its flagship solution, PayControl GOST—a multifunctional platform for mobile authentication and electronic signatures. The solution allows for quick and secure verification of financial transactions and signing of electronic documents in accordance with the requirements of Russian legislation and regulators.

PayControl provides effective protection against the most common attacks targeting financial institution clients, including phishing, OTP code interception via trojans, SIM card swapping, document tampering, and social engineering. The solution is designed to drastically enhance the security of a bank’s digital channels compared to traditional SMS and PUSH codes.
Company overview
SafeTech is a Russian developer of innovative solutions for protecting remote banking and e-document management systems. The company creates security tools for digital channels to make everyday tasks easier, more convenient, and safer for users.

SafeTech solutions help financial and other organizations implement new digital services, including opening accounts remotely without visiting a bank office, registering new businesses online, creating phygital offices, and electronic interactions with partners.

Key figures and facts:

— 14 years on the market
— 80+ partner banks
— SafeTech projects are implemented in all 10 of the top 10 Russian banks
— 15,000,000 users of SafeTech solutions
— Top 100 information security supplier in Russia
Participation in Standoff Cyberbattle
As a partner, the NTI Center at MPEI participated in Standoff 15 Cyberbattle by providing the SHC DTPS and implementing a real-time model simulating the operation of a national power system. The model includes power plants (hydroelectric, thermal, and wind), main power grids, as well as power supply networks for a metallurgical plant and a city. The SHC DTPS also incorporates virtual PLCs that simulate the operation of protection and emergency automation systems within the power system model.

A distinctive feature of the SHC DTPS implementation for Standoff was the inclusion of functions for automatic calculation of cyberattack consequences, expressed both in terms of lost generation and load capacity (in megawatts) and in monetary terms. The damage assessment considers the severity of the accident, recovery time, and the exponential relationship between economic damage and power supply interruption duration.
Company overview
The National Technology Initiative (NTI) Competence Center "Electric Power Transmission Technologies and Distributed Intelligent Energy Systems" at the National Research University "Moscow Power Engineering Institute" (NTI Center at MPEI) develops solutions for intelligent power system protection and automation, including microgrids with renewable energy sources and energy storage systems.

The key technologies developed by the NTI Center at MPEI are:

  1. Intelligent power system protection and automation platform based on open architecture with support for virtual PLCs, featuring self-configuration, self-organization, and self-healing capabilities.
  2. Software-hardware complex "Digital Twin of Power Systems" (SHC DTPS) enables real-time modeling of normal and emergency processes in power systems. The SHC DTPS is used at the power system design stage, during testing of digital protection and automation systems, as well as in operation for forecasting, calculating optimal control actions, maintenance planning, and assessing potential consequences of cyberattacks.
Participation in Standoff Cyberbattle
A critical component powering the realistic infrastructure of Standoff Cyberbattle is the company’s flagship solution—DS Integrity packet brokers. This equipment ensures proper orchestration of IT and cybersecurity infrastructure for the virtual nation.

Just as in Standoff Cyberbattle, DS Integrity optimizes traffic for analytical systems in real-world infrastructures, enabling scalable cybersecurity solutions across sectors—banking, energy, government, industrial, and transportation. Since 2021, the joint DS Integrity & PT Network Attack Discovery solution has been successfully safeguarding Russia’s critical infrastructure.
Company overview
"Digital Solutions" is a Russian developer and manufacturer of network equipment for information security. For over 20 years, the company has maintained full-cycle production based on in-house R&D—from hardware platforms to network traffic processing technologies. All equipment produced by "Digital Solutions" is listed in the Russian Ministry of Industry and Trade registry and meets trusted hardware/software complex (HSC) criteria.
Join our server
The main hub for the Standoff community
Here you'll find live streams, event announcements, the latest news and updates, and the chance to connect with red and blue team members.
Standoff timeline
Over the last nine years, the cyberbattle has gained recognition in Russia and beyond.
2016
The first Standoff cyberbattle
(PHDays, Moscow)
Standoff 2
2017
(PHDays, Moscow)
2018
Standoff 3
(PHDays, Moscow)
Standoff 4
2019
(PHDays, Moscow)
(Abu Dhabi)
Standoff 5
2020
Standoff 6
(Online)
Standoff 7
2021
(PHDays, Moscow)
(Moscow)
Standoff 8
Standoff 10
(Moscow)
(Moscow Hacking Week)
Standoff 12
2022
Standoff 9
(PHDays, Moscow)
Standoff 11
2023
(PHDays, Moscow)
2024
Standoff 13
(PHDays, Moscow)
(Online)
Standoff 14
If you have any questions about participation or the battle itself,
please contact us at
hello@standoff365.com
Copyright © 2025 Standoff 365. All rights reserved.
RU
EN