What's New

Export Results on a classroom’s Assignments tab emails you one CSV covering as many of the class’s assignments as you choose, active or closed. It has a row per student for each challenge, learning path, chapter, and module: whether it’s done and when, learning path progress, and each challenge’s attempts and wrong attempts. Times are in your time zone, and the file opens cleanly in Excel.

Students who haven’t worked on any of the chosen assignments are left out, and the email names them. You can export each classroom once an hour, so pick everything you need first. For one assignment’s results right away, use Export CSV under View Results.

Web challenges usually run on a port of their own, like http://chatelaine.cylabacademy.net:21559, and many school networks block those ports. Turn on HTTP proxy under Challenge Links in your account settings, and challenge links switch to the standard web port, like http://21559.chatelaine.cylabacademy.net, which networks usually allow.

Some challenges may not work through the proxy, and it only helps with web challenges. For the rest, use the webshell. If you manage a school network, the Educators FAQ lists the hosts to allow.

Turn on browser notifications from the prompt on your notifications page, or under Browser Notifications in your account settings. While CyLab Security Academy is open in a tab, even one in the background, you’ll get a pop-up when a new notification or site notice arrives. Classroom and team leaders also get one for each new join request. Click it to go straight there.

The setting is per browser, so turn it on in each one you use. Mobile Chrome can’t show them.

Turn on Run as a scrimmage when you set up an assignment, give it a start date, and it becomes a short contest for your class. Students see it and its live scoreboard once it starts.

• Scoring: a challenge is worth its difficulty: easy 1, medium 2, hard 3. A learning path, chapter, or module scores once every part of it is done.
• Everyone starts even: only work between the start and the due date counts. A student who solved a challenge before scores it by submitting its flag again.
• Locked once it starts: the challenges and start date can’t change. You can still rename it, reorder it, or move the due date later.

A classroom can have one scrimmage scheduled or running at a time. For team play, create a classroom for the scrimmage and batch-register one shared account per team. More about scrimmages.

Assignments now keep the order you give them. After picking challenges and learning paths, click Review order and drag the rows into place. Students see them in that order, and the results grid and CSV export follow it too.

You can reorder an assignment at any time, even a scrimmage that’s already running. Assignments made before this change kept the order they already had.

You can now link your Discord account to your CyLab Security Academy account. Join our Discord server, run /verify, and the bot walks you through signing in. Once you’re linked, you get the server’s verified role.

Your link is private unless you choose otherwise: other members can look up your profile through the bot only if you opt in. Run /verify again to change that, or /unlink to remove the link. Your link shows under Connected Accounts in your account settings.

View Results on an assignment now opens with a summary: how many students finished on time, finished late, or haven’t finished, and how much of the assignment’s challenges, learning paths, chapters, and modules the class has completed. Export CSV downloads the full per-student breakdown, however big the class is. For large classes, the summary and the CSV take the place of the per-student list.

Results also stop counting students who joined after the due date, so a late addition to your class doesn’t show up as missing old work. To count everyone currently in the class instead, turn off Restrict results to due-date roster in the classroom’s Settings.