WASHINGTON – The Cybersecurity and Infrastructure Security Agency (CISA) announced the winners of the seventh annual President’s Cup cybersecurity competition today. The President’s Cup brings together the nation’s strongest cyber talent for a series of high‑pressure, mission‑driven challenges designed to test defensive skills, offensive tradecraft, and team-based strategy.
More than 800 individuals and 200 teams entered this year’s President’s Cup, which began in January with virtual qualifiers. Only the top federal cyber operatives advanced to the Finals, held in the Washington, DC area, which concluded the last week of May. Competitors were able to enter any or all of three tracks: Individuals Defensive Track, Individuals Offensive Track, or Teams, with each stage pushing their endurance, creativity, and technical expertise. Each mission simulated high-stakes cyber operations requiring precision, resilience, and deep technical knowledge.
The winners of the seventh annual President’s Cup are (usernames are being used to protect individuals’ operational security):
- Defensive Track Champion: “sheriffsparks,” United States Navy
- Offensive Track Champion: “bdubya,” United States Army
- Teams Champion: “ENOENTHUSIASM,” United States Army & United States Marine Corps
“The President’s Cup features the best cybersecurity talent the U.S. government has to offer,” said CISA Acting Director Nick Andersen. “These champions rose above an elite field, securing victory through sharp analysis, decisive action, and advanced cyber tradecraft. We congratulate this year’s winners and thank everyone who participated in the seventh annual President’s Cup.”
CISA leads and hosts the President’s Cup each year to identify, challenge, and reward the best cyber talent across the federal workforce. The competition features high-impact cybersecurity scenarios — from responding to incidents and analyzing digital evidence to reverse engineering and hunting for threats — and it is open to federal civilian employees, as well as active duty and reserve military personnel.
Future participants can hone their skills and practice on earlier President’s Cup challenges at PresidentsCup.CISA.gov.
###
About CISA
As the nation’s cyber defense agency and national coordinator for critical infrastructure security, the Cybersecurity and Infrastructure Security Agency leads the national effort to manage, uncover, and reduce risk to our digital and physical infrastructure Americans rely on every hour of every day.
Visit CISA.gov for more information and follow us on X, Facebook, LinkedIn, Instagram.
Facts Only
The Cybersecurity and Infrastructure Security Agency (CISA) announced the winners of the seventh annual President’s Cup cybersecurity competition.
The competition tested defensive skills, offensive tradecraft, and team-based strategy.
More than 800 individuals and 200 teams entered this year’s President’s Cup.
Virtual qualifiers for the competition began in January.
Finals were held in the Washington, DC area and concluded in the last week of May.
Competitors could enter tracks including Individuals Defensive Track, Individuals Offensive Track, or Teams.
The Defensive Track Champion was “sheriffsparks,” United States Navy.
The Offensive Track Champion was “bdubya,” United States Army.
The Teams Champion was “ENOENTHUSIASM,” United States Army & United States Marine Corps.
CISA leads and hosts the President’s Cup to identify, challenge, and reward cyber talent across the federal workforce.
Executive Summary
Full Take
The framing of this competition as identifying "the nation's strongest cyber talent" establishes a high-stakes narrative around federal cybersecurity expertise. This creates an implicit expectation that participation is synonymous with elite capability, which functions as a form of authority game—CISA appeals to the inherent value and recognized skill of the participants. The emphasis on metrics like "sharp analysis" and "decisive action" positions cyber proficiency not merely as technical skill but as a moral or national imperative. This narrative structure attempts to solidify public trust in federal cybersecurity capabilities by showcasing an exclusive group of high performers, potentially diverting attention from systemic resource allocation challenges facing critical infrastructure defense. The use of usernames for operational security signals an awareness of sensitive information handling protocols, which subtly reinforces the idea that these competitors operate at a level requiring military-grade discretion. The pattern suggests an attempt to leverage competitive achievement to validate the necessity of federal cyber investment, framing risk mitigation as a meritocratic pursuit rather than a complex, ongoing systemic challenge.
Patterns detected: ARC-0043 Motte-and-Bailey, ARC-0024 Ambiguity
Sentinel — Human
The text exhibits the highly structured, formal language typical of official press releases, suggesting human authorship or meticulous institutional editing rather than synthetic generation.
