Fix boring security tasks to win $20,000. Join the hackathon
Log inSign up
Sola Security – Global Security Hackathon – “Boring.Security”

Terms and Conditions

  1. General
    1. These Terms and Conditions (the “Terms“) govern participation in the Global Security Hackathon (the “Hackathon“) organized by Sola Security Inc., (the “Company”).
    2. Participation in the Hackathon constitutes full and unconditional acceptance of these Terms.
    3. The Company reserves the right to modify, suspend, or cancel the Hackathon, in whole or in part, at any time at its sole discretion, with or without notice.
  2. Hackathon Purpose and Scope
    1. The purpose of the Hackathon is to invite security practitioners worldwide, with an active Sola Workplace (as defined below), to build creative solutions for security challenges using the Company’s platform.
    2. The Hackathon will be conducted online at https://boring.security. The Hackathon’s launch date is June 2, 2026. Key dates:
      1. Registration for submissions opens: June 2, 2026
      2. Submission deadline: June 22, 2026 at 11:59PM EDT
      3. Public voting period: June 2-30, 2026
      4. Winners announced: No later that July 10, 2026
    3. Participants must build a solution that addresses a security task using the Company’s platform (https://app.sola.security) and at least one of the following data sources: AWS, Azure, GCP, Okta, Entra ID, Google Workspace, CrowdStrike, SentinelOne, Jamf, JumpCloud, GitHub, Shodan, AbuseIPDB. The participant must demonstrate their built solution in a short video, and post their submission as specified in Section 5 below.
  3. Eligibility
    1. The Hackathon is open to security practitioners worldwide, subject to the restrictions below.
    2. Participants must be at least 18 years of age at the time of registration.
    3. Participation shall be individual.
    4. Participants must have an active Sola Workplace (as defined in Sola’s terms of services, available here).
    5. The following persons are not eligible to participate:
      1. Employees, officers, directors, and contractors of the Company and its affiliates; and
      2. Immediate family members and members of the same household as any of the above; and
      3.  Persons residing in a country or region where the Company is not legally permitted to do business.
  4. Registration
    1. Registration must be completed through the official registration form at https://www.boring.security/submit during the registration period specified in Section 2.2. Participants must create an account on boring.security to participate. The Company reserves the right to verify the identity and eligibility of each registrant. Any registration that cannot be verified to the Company’s reasonable satisfaction may be disqualified.
    2. Each individual may submit only one (1) registration. Duplicate registrations will be disqualified and may result in the termination of the individual’s account with the Company.
    3. By registering, each participant represents and warrants that the information provided is accurate and complete and that they satisfy all eligibility requirements.
  5. Submission Requirements
    1. To be eligible for judging, each submission must include:
      1. A chosen display name for the individual registering;
      2. A written short and long description of the security challenge addressed, the solution built, and its practical value;
      3. A short video (maximum 1 minute, under 100MB) demonstrating the solution in action on the Company’s platform, or a link to a publicly viewable video hosted on Loom or YouTube; 
      4. An image that will serve as the featured image for the submission;
      5. A link to any supporting materials or public code repository (if applicable); and
      6. Any other materials specified by the Company on the registration page.
    2. Submissions must be posted in the manner specified on the Hackathon registration page by the submission deadline specified in Section 2.2. Late, incomplete, or improperly submitted entries may be disqualified at the Company’s sole discretion.
    3. Once submitted, a submission may not be edited or amended in any way. If a participant wishes to make changes to their submission, they must delete the existing submission and resubmit a new one. Deletion of a submission will result in the permanent forfeiture of all votes that submission has received, and the new submission will begin with zero votes.
    4. Submissions must be made in English.
    5. By submitting, participants confirm that the submission is their own original work, does not infringe any third-party intellectual property rights, and does not contain any confidential, proprietary, or sensitive information belonging to any third party.
    6. Submissions must not include malicious code, exploits, or functionality designed to harm, disrupt, or gain unauthorized access to any system, including the Company’s platform.
    7. Submissions must not include any harmful content, such as profanities, nudity or violent depictions.
    8. Participants are solely responsible for ensuring that any sensitive or confidential information visible in their submission materials, including but not limited to: repository names, personal names, personally identifiable information (PII), internal system details, or proprietary data, is appropriately anonymized, redacted, or obscured prior to submission. The Company assumes no responsibility for sensitive information disclosed through participant submissions
    9. All submissions must include demonstrated use of at least one of the integrated data sources specified in Section 2.3. Participants may but are not required to utilize other data sources outside of this list.
    10. All submissions will be subject to review by a team of moderators representing the Company, verifying the eligibility of the submission. 
    11. Moderators will review new submissions within 48 hours of submission, and either approve or reject submissions based on eligibility and their own discretion.
  6. Voting and Winner Selection
    1. Winners will be selected by public community vote. Eligible submissions will be made publicly available for voting during the voting period specified in Section 2.2.
    2. The voting shall be open to any member of the public, provided that such person has registered for an account on the Boring Security website at https://boring.security. The Company reserves the right to verify the identity of voters, and any vote cast by a person who cannot be verified to the Company’s reasonable satisfaction may be invalidated. Voting is subject to the mechanics and rules published on the Hackathon page.
    3. Vote Integrity. Any attempt to manipulate the voting process is strictly prohibited. This includes, without limitation, using bots, scripts, or automated tools; creating multiple accounts; or any other conduct that the Company determines, in its sole discretion, constitutes vote manipulation.
    4. The Company reserves the right to disqualify any submission and/or invalidate votes that it reasonably determines are the product of fraudulent or manipulative activity, and to re-run the vote or apply an alternative selection method if the integrity of the voting process is materially compromised.
    5. The three (3) submissions receiving the highest number of legitimate votes will be declared the first, second, and third place winners respectively. In the event of a tie, the Company’s decision shall be final.
    6. The Company’s determination of the winners is final and binding.
  7. Prizes
    1. The following cash prizes will be awarded (the “Prizes”):
      1. 1st Place: USD 20,000
      2. 2nd Place: USD 10,000
      3. 3rd Place: USD 5,000
    2. Prizes will be paid by wire transfer to the bank account details provided by the winner. Payment will be made in USD within 60 days of winner verification (see Section 7.4 below).
    3. Prizes are non-transferable, non-assignable, and may not be exchanged for any alternative award.
    4. Prior to receiving a Prize, each winner must: (a) confirm their identity and eligibility to the Company’s reasonable satisfaction; (b) provide valid banking details for payment; and (c) execute any documentation reasonably required by the Company, including a winner declaration and, where applicable, tax forms. If a winner fails to complete verification within 14 days of notification, the Prize may be forfeited and awarded to the next highest-ranked eligible submission.
    5. All applicable taxes, duties, and levies on the Prize are the sole responsibility of the winner. Winners are solely responsible for complying with applicable tax reporting and payment obligations in their jurisdiction. The Company reserves the right to withhold any amounts required by applicable law.
    6. The Company reserves the right to substitute a Prize of equal or greater value.
    7. Notwithstanding any other provision of these Terms, the Company shall not be required to transfer or otherwise pay any Prize where doing so is not permitted under applicable law.
  8. Intellectual Property
    1. All intellectual property rights in and to a participant’s submission shall remain the sole property of the participant(s). Participation in the Hackathon does not transfer any ownership rights in submissions to the Company.
    2. By submitting, each participant grants the Company a non-exclusive, royalty-free, worldwide license to access, review, display, and evaluate the submission for the purposes of conducting the Hackathon and determining the winners.
    3. Publicity License. By participating, each participant grants the Company the right to use the name of the participant, the organization’s name, and a general description of the submission (without disclosing confidential technical details) for marketing, promotional, and public relations purposes, without additional compensation.
    4. Company IP. Nothing in these Terms grants participants any rights in the Company’s platform, technology, or intellectual property. Access to the Company’s platform during the Hackathon is subject to the Company’s then-current Terms of Service.
    5. Participants must not include confidential, proprietary, or sensitive information (whether their own or belonging to any third party) in their submissions. The Company shall have no confidentiality obligations with respect to submissions.
  9. Responsible Disclosure
    1. If, in the course of developing their submission, a participant discovers any security vulnerability or bug in the Company’s platform or systems, the participant must promptly report it to the Company at [email protected] and must not exploit, disclose, or share the vulnerability with any third party.
    2. Participants must not attempt to gain unauthorized access to any systems, data, or accounts in connection with their participation in the Hackathon.
    3. Any submission that exploits a vulnerability in the Company’s platform or systems will be immediately disqualified, and the Company reserves all rights and remedies available under applicable law.
  10. Data Privacy
    1. The Company will collect and process personal information provided by participants and voters including: name, email address, contact details, and submission content for the purposes of administering the Hackathon, communicating with participants, conducting the review and voting process, awarding Prizes, and (for winners) publicity activities.
    2. Processing of personal information will be carried out in accordance with the Sola’s Privacy Policy available here and applicable law.
    3. By participating and providing personal information, participants and voters acknowledge and consent to the processing described in this Section.
  11. Conduct and Disqualification
    1. Participants must conduct themselves in a professional and lawful manner throughout the Hackathon.
    2. The Company may disqualify any participant at any time, and require repayment of any Prize already paid, if it determines that the participant has:
      1. Violated these Terms;
      2. Provided false or misleading information;
      3. Engaged in vote manipulation or other fraudulent activity;
      4. Infringed any third-party intellectual property rights;
      5. Submitted malicious code or attempted to harm the Company’s platform; or
      6. Engaged in any other conduct that the Company reasonably determines is harmful to the integrity of the Hackathon.
  12. Disclaimer and Limitation of Liability
    1. Participation in the Hackathon is voluntary and at the sole risk and responsibility of the participant.
    2. The Company makes no representations or warranties regarding the Hackathon, including its continuity, the accuracy of any information provided, or the technical availability of the platform.
    3. To the maximum extent permitted by applicable law, the Company shall not be liable for any direct, indirect, incidental, special, or consequential damages arising out of or in connection with participation in the Hackathon, including without limitation loss of profits, loss of data, or personal injury.
    4. Nothing in these Terms limits liability for death or personal injury caused by the Company’s negligence, or for fraud or fraudulent misrepresentation.
  13. General Provisions
    1. No Employment or Partnership. Nothing in these Terms creates an employment, agency, partnership, or joint venture relationship between the Company and any participant.
    2. Entire Agreement. These Terms constitute the entire agreement between the Company and participants with respect to the Hackathon and supersede all prior communications and understandings.
    3. Severability. If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.
    4. Waiver. The Company’s failure to enforce any provision of these Terms shall not constitute a waiver of its right to do so.
  14. Governing Law and Jurisdiction
    1. These Terms shall be governed by and construed in accordance with the laws of the State of Israel, without regard to its conflict of laws principles. By participating, each participant irrevocably submits to the exclusive jurisdiction of the competent courts of Tel Aviv-Yafo, Israel for the resolution of any dispute arising out of or in connection with these Terms, without prejudice to any provisional or interim relief available in any other jurisdiction.