A deliberately vulnerable, fully simulated AI-built SaaS. Capture 18 flags across secrets, auth, payments, deploys, bots and ops. Everything runs in your browser. No real keys, no real network attacks.
18 flags. Progress stays in this browser. Optional nickname on the board; no email required to play.
0 of 18 flags
acme-vibe.app (simulated)signed out
AcmeVibe Notes
Fake SaaS: notes, billing, admin. Signed in as alice.