One account per person. No multiple or shared accounts. Team play is fine if the event is in team mode — register one team, not five.

Don't share flags or solutions with other players during the competition. Solve it yourself or with your own team.

Attack the challenges, not the platform. No attacks against the CTFd scoring server, other players, or the network it runs on. That's an instant ban.

No brute-forcing the flag submission. Automated guessing of flags or spamming submissions will get you rate-limited and may disqualify you.

Scan only what you're told to. Heavy scanning, DoS, or traffic that disrupts other players or the infrastructure is not allowed.

Scoring is points-based. Harder challenges are worth more. If two players tie on points, the earlier last-solve takes the higher rank.

Be decent. No harassment, no offensive names, no sabotage. Organizers' decisions on conduct and disqualification are final.