On 15 October 2026, we are at Cyber Day 2026 in Ljubljana, and we are bringing something to try with your own hands: a mini capture-the-flag (CTF) at the Bunkai booth in the Cybervillage.
Why a CTF
Cyber Day is about cyber resilience for micro, small and medium-sized enterprises. For any company that makes a connected product, the EU Cyber Resilience Act (CRA) turns that into a concrete task: show evidence that the product is secure, or face fines up to EUR 15 million or 2.5% of global annual turnover.
Most product teams we meet have no security specialist on staff. Their question is practical: “How do we test this ourselves?” A talk can describe the answer. A CTF lets you do it.
What You Do at the Booth
We have set up demo IoT devices and planted weaknesses in them on purpose. Next to each one sits a securely configured counterpart.
– Run an automated security test on a demo device with Bunkai
– Read the report and find the planted weaknesses
– Answer the challenge questions and collect points on the live scoreboard
Come for one challenge or stay for the whole set.
Who It Is For
You do not need a security background. Every challenge tells you where in Bunkai to look, so product managers, compliance officers, developers and quality engineers can all take part.
What You Take Away
– A first-hand view of an automated IoT security test, from start to report
– The difference between the report of a weak device and a secure one
– An idea of how findings map to standards such as the CRA and ETSI EN 303 645
Where and When
– Event: Cyber Day 2026, organised by Digital Innovation Hub Slovenia
– Date: 15 October 2026, 09:00–15:00
– Venue: Ljubljana.tech, BTC Ljubljana, Trg mladih 9, Ljubljana
– Find us: in the Cybervillage, open from 09:00 to 09:30 and from 13:30 to 15:00
– Program and registration: here
Bunkai is built by the IoT security practitioners at SevenShift, a technical partner in the EU-funded CRACoWi project (Grant Agreement No. 101158539). CRACoWi is on the Cyber Day agenda too, with a tools demonstration at 10:45.
Not in Ljubljana?
If you cannot make it, you can still see Bunkai on your own device: Request Early Access.