When I launched SecurityElites in February, I added the XP system for one simple reason: I wanted to know who was actually doing the work — not just opening tabs and collecting articles.
Because let’s be honest: reading about hacking isn’t the same as practicing it. You can read 50 articles about Nmap and still freeze when it’s time to run your first scan. You can watch ten tutorials on web security and still struggle with your first lab.
That’s why XP is tied to action. Finish a course day. Complete an exercise. Pass a quiz. Share an answer. Finish a hacking lab. Use a security tool. Every meaningful step forward earns XP — and over the past few months, that XP has quietly turned into something much more interesting: a public record of who is actually putting in the work.
Now we’re changing the game.
Starting today — Tuesday, 6 October 2026 — the leaderboard is officially a competition. You have 14 days to climb as high as you can. The person sitting at #1 when the challenge closes on 19 October wins a professional certification worth $299 + 1 month of SecurityElites Premium.
And #1 isn’t the only spot worth fighting for. There are 10 winning positions. Premium memberships, Claude Pro, certification — the rewards cascade all the way down the leaderboard.
Here’s the interesting part: you don’t need to be the fastest learner to win. You need to understand how the XP system works.
Daily streaks can multiply your score. Premium members get an additional multiplier. Certain activities are worth far more XP than others. A smart 30-minute session can sometimes beat someone else’s two-hour grind.
So before you start clicking everything in sight, take five minutes and learn the rules.
👇 Check the prize ladder. Find the highest-value XP activities. Build your strategy. Then enter the leaderboard.
And if you’re already participating, there’s one question I want you to answer:
🎯 What’s your target — Top 10, Top 3, or #1?
Pick your target, start earning, and come back in 14 days to see how far you climbed.
The challenge is live. Your first XP is waiting.
🎯 What’s Up for Grabs
⏱ 14 days · Started Tue 6 Oct · Ends Sunday 19 Oct 2026 (23:59 IST)
🚀 One More Thing — Something Big Is on the Radar
The XP you earn during this challenge counts toward your 14-day leaderboard total, but it also adds to your lifetime SE XP. And lifetime XP is about to matter more than it ever has.
I can’t say exactly what yet. But an airdrop is coming, and the earlier you start building your XP position, the better placed you’ll be when the announcement drops. The learners who’ve been grinding since February are about to see the long game pay off. The learners who start grinding during this challenge are getting in at exactly the right moment.
Keep accumulating XP long after the challenge ends. The leaderboard resets for the event, but your lifetime total is permanent — and permanent is what counts for what’s coming next. Keep stacking.
SecurityElites 14-Day XP Challenge — Complete Guide
The Prize Structure — What Every Top-10 Winner Gets
I designed the prize structure to reward more than just the winner. Ten participants will finish inside the winning positions, and each one will walk away with something valuable. The prizes are split between professional career value — including the certification and SE Premium memberships — and practical productivity value through the Claude Pro subscription.
The 1st-place certification voucher is your choice from a shortlist of eligible beginner-to-intermediate professional certifications. Depending on availability, eligible options may include CEH practice-track vouchers, Security+ practice-track vouchers, and selected specialised vendor credentials. After the challenge, I’ll contact the winner with the current list so they can choose the option that best matches their career goals.
SE Premium membership unlocks the currently locked courses, practice labs, and extended tool suite, including advanced security tools and additional lookup capabilities. Premium also provides expanded access to selected practice resources. At $19/month, three months of Premium represents $57 in membership value for the 2nd- and 3rd-place winners.
Claude Pro for 4th place is a deliberately different kind of reward. Instead of another Premium subscription, the 4th-place winner receives a one-month Claude Pro subscription, funded by SecurityElites. It’s designed as a practical productivity prize for someone who puts in serious effort and finishes just outside the top three.
If you’re a developer, cybersecurity learner, or security researcher, an AI assistant can become a genuinely useful part of your workflow — from understanding technical documentation and brainstorming study approaches to reviewing notes and exploring ideas. The important thing is that every position in the top 10 has a meaningful reward attached to it.
How to Join — Registration and Eligibility
Joining is simple. If you already have a SecurityElites account, there’s no separate challenge registration — you’re automatically enrolled. If you don’t have an account yet, create one and start earning. Your challenge XP counts from Tuesday, 6 October 2026, when the competition goes live.
If you already have an account. You’re ready to go. Log in, complete your first eligible activity, and start climbing the leaderboard. Your challenge XP is tracked separately for the 14-day competition, while your all-time XP total remains intact. In other words, participating in the challenge does not erase or reduce your permanent SecurityElites XP.
If you don’t have an account yet. Head to SecurityElites.com/register/ and create your account. The challenge is already live, so you can start earning immediately. Free accounts can access eligible course content, free tools, quizzes, exercises, and other XP-earning activities. Starting late means you’ll have fewer days to build your score, but the challenge is designed so that consistent activity and smart use of multipliers can make a significant difference.
Premium accounts earn 3X XP on eligible actions. During this challenge, Premium members receive a 3X multiplier on qualifying XP activities, including course completions, exercises, quizzes, labs, comments, and referrals where applicable. For example, if an eligible course day normally awards 500 XP, a Premium participant earns 1,500 XP for that same activity before any applicable streak multiplier. The Premium multiplier can then stack with the streak multiplier explained later in this guide.
Free accounts can still compete. You do not need Premium to participate or earn XP. Premium provides an earning advantage, but the leaderboard remains open to eligible free users as well. Your activity, consistency, and strategy still matter.
Eligibility. The challenge is open worldwide, subject to applicable laws and the following eligibility rules. Accounts previously flagged for spam or abuse are not eligible. Corporate email accounts created within the seven days immediately preceding the challenge may be excluded where necessary to prevent duplicate or last-minute account farming. SecurityElites employees and anyone with privileged access to the XP system or backend are also excluded.
Eligibility will be verified before prizes are awarded. Attempts to manipulate XP, create duplicate accounts, exploit technical issues, automate activity, or otherwise circumvent the challenge rules may result in leaderboard removal and prize disqualification. If a ranked participant is disqualified, the next eligible participant will move into that position.
Every Way to Earn XP — The Complete Points Table
The complete XP earning system. Every action listed here awards XP that counts toward your challenge total, and I’ve listed the point values that apply during the challenge window. Some of these values are boosted from the normal site rates because the challenge is meant to reward concentrated effort during the 14 days.
Course completion — the largest single XP source
Each full course day you complete during the challenge window awards 500 XP. A full 7-day course completion is 3,500 XP. Completing a 5-day course is 2,500 XP. Since we have ten courses live on the site right now — Deepfake Detection (7 days, complete), MCP Security (Day 1-2 live, more coming during the challenge), AI Basics (5), LLM Basics (5), AI Coding (5), AGI Basics (5), Bug-Free App Dev (5), Prompt Engineering (7), AI Agents (5), Kiro IDE (7) — there’s roughly 30,000 XP available from courses alone if you completed everything. Nobody has ever completed every course during a 14-day sprint, but the top three finishers historically complete 3-4 courses each.
Exercises — the second-largest source
Each exercise you complete and post your answer to earns 100 XP. Every course day has 3 exercises, so each day of a course contributes 300 XP from exercises on top of the 500 XP for the day itself. The exercise XP requires you to actually post your answer as a comment on the article — the comment is how the system verifies completion, so a real submitted comment is required, not just claimed completion.
Quizzes — fast XP if you know the material
Each quiz you pass earns 50 XP for first-time completion. Retaking a quiz you’ve already passed earns 10 XP for maintenance runs (capped at once per day per quiz). The daily practice quizzes on individual concept pages award 25 XP each. If you sit down and clear a batch of concept quizzes on topics you’re already fluent in, that can produce meaningful XP in short bursts.
Hacking labs and tool usage
Completing a hacking lab challenge earns 200 XP per lab. Successfully using one of the free tools with a meaningful input (an actual dork search, an actual breach check, an actual SSL cert inspection) earns 15 XP per unique use per day, capped at 5 unique tool uses per day for a maximum of 75 XP daily from tool usage. The CEH practice exam awards 150 XP per full exam completion, capped at one exam per day.
Community contribution
Quality comments that add substance to an article earn 25 XP per approved comment. Answering another user’s question in the comments earns 40 XP per approved answer. Being the first to correctly identify a bug or errata in an article earns 200 XP one-time bounty. Sharing a course article to LinkedIn, Twitter, or another public channel with genuine engagement (not just the auto-share button) earns 50 XP per verified share, capped at 3 shares per day.
Daily engagement
Logging in and reading at least one article per day earns a 20 XP daily login bonus. Maintaining a login streak through the entire 14-day challenge (all 14 days) earns a 500 XP streak completion bonus at the end. This alone is a meaningful chunk of XP and it costs you nothing except showing up daily.
Referrals
Referring a new user who creates an account and completes at least one exercise during the challenge earns you 150 XP per verified referral. There’s no cap on referrals but each referred account only counts if it’s genuinely active during the challenge — inactive accounts referred just to farm XP will be discarded and the referral XP revoked.
The multipliers — Premium 3X and the streak ladder
Two multipliers stack on top of the base rates above and are the most important mechanic for anyone serious about placing top-10. I added them this cycle specifically to reward Premium members who are funding the platform and to reward daily consistency over sporadic grinding.
Premium 3X XP. Every XP action a Premium account earns is multiplied by three. Not just course completion — everything. Comments, quizzes, tool uses, referrals, hacking labs, exercises, login bonuses. If you’re already Premium, you earn 3X by default from the moment the challenge opens. If you upgrade mid-challenge, the 3X applies to every action from that point forward (prior earnings are not retroactively multiplied). Premium is $19/month; the 3X multiplier plus the full course-content access it unlocks makes the economics obvious if you’re serious about winning.
The streak multiplier — everyone gets this. Your login streak during the challenge drives a separate multiplier that applies on top of base rates (and on top of Premium 3X if you have it). The tiers:
- Days 1–2: baseline (1.0x)
- Days 3–6: 1.1x — 10% boost after you’ve shown up three days running
- Days 7–9: 1.25x — 25% boost once you’re a full week in
- Days 10–13: 1.5x — 50% boost through the home stretch
- Day 14: 2.0x — the final day doubles everything
Miss a day and your streak resets to day 1. The 500 XP streak completion bonus at the end still requires all 14 consecutive days — one missed day doesn’t just reset the multiplier, it kills the completion bonus entirely. This is deliberate. Daily consistency is the thing I most want to reward because it’s what builds the learning habit beyond the challenge window.
Stacking example. A Premium user on day 14 completing a full course day earns: 500 base × 3 (Premium) × 2.0 (day 14 streak) = 3,000 XP from a single action. That same user completing an exercise earns 100 × 3 × 2.0 = 600 XP per comment. The multipliers compound dramatically in the final stretch, which is where the leaderboard positions actually get decided.
📅 The Practical 14-Day XP Plan — What to Do Each Day
You don’t need to guess what to do when you log in. Here’s the simple plan I’d recommend if your goal is to build a strong leaderboard score while actually improving your cybersecurity skills. Adjust the workload to your schedule, but try not to break the daily streak.
Complete your first eligible course activity, take the available quiz, complete an exercise, and make your first meaningful contribution to the community. The goal today is simple: get moving and establish the habit.
Continue the same course or learning track. Complete the day’s course activity, exercise, and quiz. Use an eligible security tool if you need it for your learning. Don’t worry about the leaderboard yet — focus on building a repeatable routine.
Your streak multiplier starts increasing. Complete your daily course activity and exercise, then use any available quiz or lab opportunity. The priority today is consistency. Don’t skip a day because you are busy; even a shorter legitimate session keeps the streak alive.
Keep progressing through your course and add a hands-on activity. Complete an authorised hacking lab or practical exercise if available. Share a useful answer or explanation in the comments when you genuinely have something to contribute.
Push toward completing your first course milestone. Review anything you struggled with during the first four days and use the available quizzes or exercises to reinforce it. Don’t sacrifice understanding just to collect XP.
Use today to finish incomplete exercises, revisit difficult lessons, and complete eligible quizzes or labs. If you’re ahead, start the next course or learning track rather than waiting for the final week.
You’re halfway through the first week. Check your leaderboard position and compare it with your original target. Finish your planned weekly milestone and make sure your streak is intact. Don’t panic if you’re not in the Top 10 yet. The later multipliers can significantly change the rankings.
Begin or continue your next learning objective. Prioritise course completion, practical exercises, and labs over low-value activity. The goal is to enter the second week with a clear list of meaningful activities rather than scrambling at the end.
Complete your daily course work and use the available quiz, exercise, and lab opportunities. Check the leaderboard once, but don’t spend your study session refreshing it. Every minute spent learning is more valuable than watching someone else’s score.
The streak multiplier reaches 1.5×. This is where consistent participants start gaining a stronger advantage. Prioritise higher-value legitimate activities such as course completion, hacking labs, and practice exams where available.
Continue your second course or learning track. Complete practical work and review your weakest topics. If you have unanswered questions from earlier lessons, resolve them now rather than carrying gaps into the final days.
You’re now inside the final stretch. Maintain the streak and prioritise activities with the highest legitimate XP value. If you’re close to your leaderboard target, stay consistent rather than trying risky shortcuts that could invalidate your score.
Finish incomplete course work and identify the eligible activities you can legitimately complete on Day 14. Do not manufacture activity or violate the rules to maximise XP. Your final day should be organised, not chaotic.
The streak multiplier reaches 2.0×. Complete your planned eligible activities, finish outstanding course milestones, take available practice exams or labs, and contribute meaningfully to the community. Premium participants receive the 3× Premium multiplier on eligible activities, so the combined multiplier can reach 6× base XP.
🎯 Your Simple Daily Checklist
Don’t overcomplicate the challenge. Every day, ask yourself these five questions:
- Did I log in and protect my streak?
- Did I complete my planned course activity?
- Did I complete at least one meaningful exercise, quiz, or practical activity?
- Did I contribute something useful to the community?
- Did I check my leaderboard position and adjust tomorrow’s plan?
If you can answer “yes” consistently, you’re doing exactly what the XP system was designed to reward.
Don’t try to win all 14 days in one day. Win today, come back tomorrow, protect the streak, and repeat. That’s how you turn 14 ordinary days into a serious leaderboard run.
The Rules — Fair Play and Anti-Gaming Provisions
Every XP event I’ve run has attracted a small number of people trying to game the system. The rules below are the ones I’ve refined across the events we’ve run since SE launched in February. Anyone who violates these rules gets XP reset and challenge disqualification — I check the leaderboard manually before awarding prizes and I read comment quality, not just count.
No multi-account farming. One account per person. Multiple accounts from the same IP, same email domain family, or same device fingerprint will be merged or disqualified. If you’re on a shared network with genuine other learners, message me before the challenge starts and I’ll note the exception.
Comments must be substantive. A comment that says “great article” earns zero XP. A comment that answers the exercise prompt, shares your specific finding, or asks a substantive question earns full 25 XP. My comment moderator does a quality-review pass before XP is awarded, and low-quality farming comments are silently rejected — the XP simply doesn’t post.
AI-generated slop is disqualifying. Comments obviously generated by pasting the exercise prompt into an LLM and pasting the output back will be caught and rejected. Learning tools are fine — use Claude or ChatGPT to help you work through the material — but pasting AI output as your comment defeats the point of the exercise and the XP for it. I’d rather see a rough, honest answer in your own words than a polished but generic AI-generated one.
Referrals must be genuine. Fake accounts, accounts created just to earn one exercise and then abandoned, or accounts registered with disposable emails and no real activity will be discarded. Referrals only count if the referred account is genuinely learning.
No exploiting XP calculation bugs. If you find a bug that awards more XP than intended, report it to me and claim the 200 XP bug bounty. Exploiting it silently and racking up thousands of XP will result in disqualification when I audit the leaderboard.
Timeline — What Happens When
Tuesday, 6 October — 🚀 Challenge LIVE. The 14-day challenge starts today and the challenge XP counter is running. Every eligible action from this point forward can contribute to your challenge score. Your lifetime SecurityElites XP continues accumulating separately, so nothing about the challenge resets or removes your permanent progress. If you haven’t logged in yet today, this is your sign to start.
Every day — 📊 Leaderboard updates. The leaderboard updates at securityelites.com/leaderboard/, where you can check your current position. The top 20 positions are displayed publicly, while participants below the Top 20 can see their own rank. Check in regularly, but don’t spend your entire study session refreshing the leaderboard — your next legitimate XP action matters more.
6–19 October — 🔥 Late joiners are welcome. You can enter at any point before the challenge closes. Starting later means you have fewer days to build your score and may have less time to develop the higher streak multipliers, but you can still earn XP from eligible activities from the moment you join. There is no reason to sit out simply because you didn’t start on Day 1.
Monday, 19 October at 23:59 IST — ⏰ Challenge closes. This is the final cutoff. XP earned after the deadline will not be added to the challenge leaderboard. Comments or other activities that are still awaiting moderation at the cutoff will only count if they are subsequently approved and otherwise meet the challenge rules.
20–22 October — 🔎 Winner verification. After the leaderboard closes, the top-ranked participants will be reviewed for eligibility and fair-play compliance. This includes checking for duplicate accounts, prohibited automation, XP manipulation, abuse, or other violations of the challenge rules.
Wednesday, 22 October — 🏆 Winners announced. Once verification is complete, the final results will be announced. Winners will be contacted by email, and SecurityElites will publish a public results article announcing the outcome of the challenge.
Then the challenge ends — but your XP journey doesn’t. Your event leaderboard resets for the next competition, while your lifetime SecurityElites XP remains part of your permanent account history.
Questions and Answers
Do I need SE Premium to participate — and does the 3X multiplier mean free accounts can’t win?
You do not need Premium to participate — the challenge is open to every account holder. But the 3X XP multiplier for Premium accounts is a real earning advantage, and I want to be honest about that rather than pretend it doesn’t matter. A Premium user with a perfect streak will typically out-earn a free user with equivalent effort. That said: free accounts can still place in the top 10. The way they do it is by maximising the streak multiplier (perfect 14-day consistency), engaging heavily in comments and tool usage where volume is uncapped, and completing the full day-1 content across multiple courses. Several past leaderboard winners have been free-tier accounts. If you’re already strongly engaged with SE and want to compete seriously, upgrading to Premium pays for itself through the challenge alone — but it’s not a requirement.
What time zone does the challenge run on?
Indian Standard Time (IST · UTC+5:30). The challenge opened Tuesday 6 October at 00:00 IST and closes Sunday 19 October at 23:59 IST. If you’re in another time zone, plan accordingly — daily login bonuses reset at 00:00 IST, so if you’re in a timezone where that lands mid-day, you can potentially earn two daily bonuses within your local day if you log in on either side of the IST midnight.
Can I see the leaderboard during the challenge?
Yes. The leaderboard updates live at securityelites.com/leaderboard/ throughout the 14 days. The top 20 positions are shown publicly with usernames and current XP totals. Positions 21 and lower see only their own rank — this keeps the public leaderboard focused on the competitive top tier while preserving privacy for participants who aren’t near the winning positions.
What if I already completed some courses before the challenge starts?
Prior course completion doesn’t count toward challenge XP — the challenge tracks new actions during the 14-day window only. However, if you completed a course before the challenge, you can still earn XP by revisiting it — retaking quizzes for maintenance XP (10 XP each, capped once per day per quiz), commenting substantively on articles you’ve already read (25 XP), and answering other learners’ questions in comment threads (40 XP). Prior completion also means you know the material well, which lets you focus your challenge sprint on new courses.
How is the $299 certification value determined?
The certification voucher covers up to $299 of certification exam or practice bundle costs at the winner’s choice from a shortlist of SecurityElites partner certifications. The shortlist includes CEH practice-track vouchers, CompTIA Security+ practice bundles, and a rotating selection of vendor-specific credentials. The voucher can be applied to a single certification of the winner’s choice — if the certification costs less than $299, the difference doesn’t roll over; if it costs more, the winner pays the difference or picks a cheaper option.
Is the Claude Pro gift transferable or usable outside my region?
The Claude Pro gift is delivered as a redemption code emailed to the 4th-place winner. Claude Pro is available in most countries where Anthropic offers service — if you’re in a region where Claude Pro isn’t available, we can substitute an equivalent-value alternative (an Anthropic API credit, a comparable AI tool subscription, or an additional month of SE Premium at your choice). The gift is not transferable to another user, but it can be redeemed to an account you already control.
What if there’s a tie at the exact XP total for a placing position?
Ties are broken by the timestamp of the tied users’ last XP-earning action — whoever hit the tied XP total earlier wins the higher position. This rewards consistency across the full 14 days rather than a last-minute sprint. In the rare case of a tie that persists after timestamp comparison (essentially impossible given millisecond precision but included for completeness), the tied positions are combined and prizes for the tied ranks are duplicated at my cost — no one gets bumped down.
Can I participate if I’ve won a previous SecurityElites challenge?
Yes, absolutely. Prior wins don’t disqualify you from future challenges. Some of our most active community members have placed top-10 multiple times. The one consideration: if you’ve won the exact same prize (a specific certification voucher, for example) in a previous cycle, you’re welcome to select a different prize from the shortlist this time rather than duplicate.
What’s the airdrop you’re teasing? When does it happen?
I can’t share the specifics yet — that’s what makes it a teaser. What I can say: lifetime XP accumulated on SecurityElites is going to matter in a way it hasn’t before. The challenge window is only two weeks, but the XP you earn during it also stacks on your lifetime SE XP total, which will be the input to what’s coming next. Monitor the site, the mailing list, and the official announcements — nothing drops before the challenge ends, but what drops after will reward the people who built their lifetime XP position early. Keep grinding beyond the 14-day window.
- Create your SE account if you don’t have one — takes 90 seconds at /register/
- Log in immediately — your day-1 login bonus and streak counter start the moment you authenticate
- Pick your first course and start Day 1 right now — course XP is the biggest single source and compounds daily
- Bookmark the leaderboard at
/leaderboard/— refreshes live, check your position daily - Set a daily login reminder for 10:00 PM IST — a missed day resets your streak multiplier to zero
- Consider upgrading to Premium if you’re serious — the 3X XP multiplier applies from the moment you upgrade
Where to Grind XP Fastest
- MCP Security for Beginners — newest 7-day course (3,500 XP for full completion)
- Deepfake Detection for Beginners — complete 7-day course (3,500 XP)
- All AI Security Courses — 10 courses total, roughly 30,000 XP if you completed everything
- Free Tools Suite — 15 XP per unique tool use, 5 uses per day cap (75 XP daily)
- CEH Practice Exam — 150 XP per full exam, once per day
