Novice
NODE-01
The starting edition, built for observation and curiosity; its hidden signals reveal themselves only to those who know where to look.
- Sharp observation
- Browser & DevTools inspection
- Logical thinking
>> DECODE THE LIGHTS_
Not just an object on your desk — a living cyberpunk city that houses a real security challenge, backed by a live cyber range you enter from your browser. Every light is a clue, and every clue waits for someone to decode it.
SECTOR.01 // IDENTITY
HexCity is a miniature cyberpunk city inside a cube. Each cube runs a real embedded system, and its doors open only to logic, observation, and technical skill.
We built it for cybersecurity teams and every tech enthusiast who loves a challenge — turning that passion into an object you hold in your hand and crown your desk with: part puzzle, part trophy, part statement.
SECTOR.02 // LIVE RANGE
Beyond a cube on the desk — behind every city is a living digital twin you enter now from your browser: eight buildings across OT, IT, and IoT, a red team attacking and a blue team defending, and a Security Operations Center (SOC) reacting to every attack in real time.
SECTOR.03 // THE NODES
Four editions, each a city in its own right — and the sharper your skill, the darker it grows.
The starting edition, built for observation and curiosity; its hidden signals reveal themselves only to those who know where to look.
Encrypted signals, hidden access points, and deliberate misdirection — a city that senses every attempt and answers it.
A multi-stage challenge that simulates real attack paths; here you earn your progress — it isn't handed to you.
A city that resists every attempt to enter: scarce clues, misleading signals, and doors that rarely open.
SECTOR.04 // PROTOCOL
A four-stage protocol is all that stands between you and lighting the whole city.
The cube spins up its own secure network, and you are the first to enter it.
Light patterns, signals, and behavior — all clues that unfold for those who pay attention.
Solve the digital and physical challenges, step by step.
The whole city bursts into light — proof of access that money can't buy.
SECTOR.05 // ACCESS KEY
A username and password aren't enough to reach HexCity; the ESP32 module itself becomes a physical security key: your device must be inside the city's network, and the key signs your access token before the door opens.
Starts from a device connected to the same network that holds the city.
Opens the city's gateway in the browser and requests access.
The browser talks to the device key on the network and asks it for a signature.
The module issues a unique JWT / HMAC signature that can't be forged or used from outside the network — this is the physical key.
The server receives the token and verifies the signature before allowing any access.
Verified access: identity, device, and network — three layers, not one.
Knowing a username and password isn't enough; the hardware key must sign your entry.
Your device must sit within the ESP32's own network; there is no access from outside.
Link several ESP32 modules for your sites or branches, each with its own key.
SECTOR.06 // OPERATORS
SECTOR.07 // VISUAL FEED
Shots from the heart of the cube, where glass meets neon and clue meets light.
SECTOR.08 // ACCESS REQUEST
Want HexCity for your team or facility? Send your request and we'll open the city gate for you.
Our safety commitment: HexCity simulates no real-world vulnerabilities. All challenges are safe, self-contained, and purely educational.