How can we help?

Browse the Labs catalog, pick a lab that matches your skill level, and click Launch. If you're signed in, your progress is saved automatically. If you're new, try a Beginner-level lab first to get familiar with the environment.

When you launch a lab, bugasm provisions an isolated environment just for you. Depending on the lab type, this may include a vulnerable application, an LLM endpoint, an agent with tools, or a full network. The environment is ephemeral — it's created on demand and destroyed when you're done.

Labs award points based on difficulty and the tasks you complete. Each lab has one or more flags to capture or tasks to finish. Submitting the correct flag earns you points toward your profile rank and leaderboard position. Partial credit is awarded for multi-task labs.

Learning paths are curated sequences of labs that guide you through a topic from start to finish — for example, 'Prompt Injection Fundamentals' or 'Agentic Security.' They give structure to your learning and track your progress across the full path.

Complete all required labs in a learning path to earn a certificate of completion. Certificates are tied to your profile and include a unique verification URL that employers or peers can use to confirm your achievement.

Yes. Every certificate has a public verification link. Anyone with the link can confirm the holder's name, the path completed, and the date earned — no account required.

Your streak counts consecutive days on which you complete at least one lab task. The streak resets if you miss a day. Maintaining a streak earns bonus badges and shows your consistency on your public profile.

Labs are rated Beginner, Easy, Medium, Hard, or Insane. Beginner labs teach core concepts with guided hints. Insane labs are open-ended challenges with minimal guidance, designed for experienced practitioners.

Click the bookmark icon on any lab card to save it to your Saved Labs list. You can find your saved labs at the top of the Labs catalog page when signed in.

Yes. Every lab environment is fully isolated from other users and from the internet. You cannot affect another user's environment, and your work stays private. Environments are destroyed after use.

Enterprise teams can invite members, assign specific labs or paths, and track completion across the team from a dashboard. Admins can also create org-private labs visible only to their team.

The Author Studio lets you build and publish your own labs on bugasm. You can write challenges, define flags, configure scoring, and preview the lab before submitting it for review. Accepted labs earn you author credit and appear in the public catalog.

Click 'Forgot password?' on the sign-in page and enter your email. You'll receive a reset link. If you signed up via a social provider (Google, GitHub), you can add a password from your account settings.

Email us at support@bugasm.com. We aim to respond within one business day. For urgent account or billing issues, include your username in the subject line.