TCS HackQuest 2026: Eligibility, Dates & Registration

TCS HackQuest Season 11: contest overview

HackQuest is TCS’s ethical hacking contest, run by its cybersecurity unit, and it follows the Capture the Flag format: you are given deliberately vulnerable systems or puzzles, and you earn points by finding hidden “flags”, which are strings that prove you solved the challenge.

The contest does not only look at how many flags you capture. Round 1 also scores the report you submit and the approach you followed, so how you explain your work matters as much as the result.

Who can participate: eligibility criteria

• Batch: students graduating in 2027. This is the main restriction, and it is why the contest is not open to every fresher.
• Status: you must be a student enrolled in a recognised college, university or academic institute in India.
• Degrees: B.Tech, B.E., M.Tech, M.E., BCA, MCA, B.Sc/B.S. or M.Sc/M.S.
• Participation: individual only. Teams and groups are not allowed.
• TCS NextStep ID: a valid CT/DT reference ID is mandatory. It must be created in the IT section of NextStep, not BPS.
• Verification: TCS can ask for documents to confirm your eligibility at any point, and can refuse entry without giving reasons.

Eligibility for the contest is separate from eligibility for TCS recruitment. Registering for HackQuest does not change TCS’s normal hiring criteria, and passing the contest does not replace them.

If you graduate before or after 2027, check the official portal before spending time on registration. Do not assume an exception exists.

Important dates

How to register for TCS HackQuest Season 11

You need a valid TCS NextStep CT/DT reference ID before you can register for the contest. The ID comes from the TCS NextStep portal, so start there.

1. Open the TCS NextStep India campus portal.
2. Log in, choose the IT section (not BPS), click Register, fill in the requested details and submit the form. This creates your CT/DT ID.
3. Note down your CT/DT ID and keep your NextStep login details safe.
4. Go to the TCS HackQuest registration portal.
5. Fill in the registration form and enter your CT/DT ID.
6. Read the consent notice and the contest terms before you accept them. The full rules are on the official HackQuest terms and conditions page.
7. Submit the form and save any confirmation message or email.

Register on Official TCS Portal

Never share your password or an OTP with anyone, including people who claim to help with HackQuest registration. MegaNaukri will never ask for them. Register only through the official TCS links above.

Contest rounds and selection process

HackQuest has three rounds. Only participants who are shortlisted move to the next one.

Round 1: online Capture the Flag

• You log in to an online application on 5 December and work through challenge statements for six hours.
• Challenges are divided into beginner, intermediate and expert categories. TCS encourages participants to attempt challenges across all categories.
• You submit the flags you capture on the portal. The application link is shared before the contest begins.
• Evaluation is based on flags captured, the quality of the report you submit, and the approach you followed to capture them.
• You must also upload a detailed, original, step-by-step report before the stated deadline. Follow the portal’s instructions for the report template, any screenshot requirement (such as timestamped flag screenshots) and the size limit.

Round 2: remote proctored challenges

• Open to participants shortlisted after Round 1, conducted online and proctored remotely by the TCS team.
• Your camera must stay on for the entire round.
• The activity is penetration testing on hosted challenges, and scoring is based on flags captured.
• Challenges may need skills in system exploitation, vulnerabilities in AI/ML-based applications, web application penetration testing, mobile security, digital forensics, threat hunting, incident response, source code analysis and security operations centre (SOC) scenarios.
• Duration and the proctoring method are communicated to those who clear Round 1.

Round 3: in-person final

• Held at TCS premises for a select list of shortlisted participants, and described as a 3–4 hour round.
• You explain your approach to the challenge statements and answer questions from a jury panel on the spot.
• The round decides the top ethical hackers of the season. Details are shared with qualified participants only.
• Earlier seasons invited the top 10 participants to an award ceremony and a chance to interact with TCS leadership. Check the official terms for how this works in Season 11.

Prizes, certificates and career opportunities

Any offer is provisional and depends on interviews and TCS’s own selection criteria, so clearing Round 2 does not by itself mean you are hired. No official salary figure is published for HackQuest, so ignore salary numbers you may see on other websites. The prize and offer conditions are in the official contest terms.

Skills to prepare for HackQuest

What TCS says helps

The contest rules say participants trained in these areas have an added advantage:

• Application security and network security
• Java/J2EE, PHP, Python and Go
• Information security and risk management
• Ethical hacking and AI red teaming
• Data analytics and data science
• AI/ML security
• Digital forensics and threat hunting
• Malware analysis and reverse engineering
• Security certifications such as Security+, OSCP, CEH or ISO 27001

“Added advantage” is not a requirement. Nothing in the rules says you must hold a certification or know a particular language to take part.

Our practical suggestions

These are MegaNaukri’s suggestions, not TCS rules.

• Practise on beginner-friendly CTF platforms such as PicoCTF, TryHackMe or Hack The Box before 5 December, so the six-hour format feels familiar.
• Learn how web vulnerabilities work first: injection, broken authentication and access control, file upload issues. Web challenges are a staple of CTF contests.
• Write a short report after every practice challenge covering what you tried, what worked and why. Since report quality is scored, this habit is worth building early.
• Get comfortable with Linux, the command line and basic scripting in Python.
• On the day, note down what you try even on challenges you do not finish, because Round 1 also looks at your approach and report.

Rules and mistakes to avoid

• Registering for the wrong batch. The contest is for the 2027 graduating batch. Confirm your batch before you start.
• Missing the CT/DT ID. Without a valid NextStep reference ID you cannot register, so create it first.
• Forming a team. Only individual participation is allowed.
• Skipping the report. Uploading the required report is mandatory. If you do not upload it before the specified deadline, you are disqualified from further evaluation, even if you captured flags. Check the portal for the template, size limit and deadline before Round 1 starts.
• Copying a report. Your report must be original. In earlier seasons, matching reports made both participants ineligible, so write your own.
• Switching the camera off in Round 2. The rules require the camera to stay on throughout.
• Providing wrong details. TCS can verify your eligibility and request documents at any stage.

The rules also cover conduct, permitted tools and TCS’s right to disqualify participants. Read the official contest rules completely before the contest.

Documents and information to keep ready

Required by TCS: a valid TCS NextStep CT/DT reference ID. TCS may also ask for documents to verify your eligibility; the rules do not list which ones.

Optional preparation checklist (our suggestion):

• Your college ID card and a proof of enrolment or the year of your degree
• The email address and phone number used for registration, which you can still access
• A laptop with a stable internet connection and a working webcam for Round 2

How to check official updates

Dates for Rounds 2 and 3, the Round 1 application link and other announcements are shared with registered participants. Check the email address you registered with, including the spam folder, and visit the official TCS HackQuest website regularly. For queries, TCS lists careers@tcs.com.

TCS HackQuest 2026 FAQs

What is TCS HackQuest Season 11?

It is TCS’s online ethical hacking contest in the Capture the Flag format, with three rounds and prizes worth up to ₹5 lakh.

Who can participate in TCS HackQuest 2026?

Students enrolled in a recognised institute in India who are pursuing B.Tech, B.E., M.Tech, M.E., BCA, MCA, B.Sc/B.S. or M.Sc/M.S. and graduate in 2027. The 2026 batch is not covered by this season.

What is the last date to register?

16 November 2026.

When will Round 1 take place?

On 5 December 2026, from 10:00 AM to 4:00 PM IST.

Is a TCS NextStep CT/DT ID mandatory?

Yes. You need a valid CT/DT ID, created in the IT section of TCS NextStep (not BPS), before you register for the contest.

Is there a registration fee?

No. There are no fees for participation, registration or submission. Any personal expenses, such as internet or travel, are yours to bear, and TCS does not reimburse them.

Can students participate in teams?

No. Participation is individual only.

Is the contest conducted online?

Rounds 1 and 2 are online, with Round 2 proctored remotely. Round 3 is held in person at TCS premises.

Does clearing HackQuest guarantee a job at TCS?

No. Top performers who clear Round 2 may stand a chance to receive provisional TCS job offers, but only subject to interviews and TCS’s selection criteria. Participation or a good rank does not guarantee a job.

What if I do not upload the required report?

Submitting the required report is mandatory. Failure to upload it before the specified deadline results in disqualification from further evaluation.

More career opportunities on MegaNaukri

• Browse latest off-campus and fresher openings

Browse more: Off-campus jobs | Internships

Spotted a mistake in this post? Tell us on the Contact Us page.

Source: Official TCS HackQuest website and contest rules