I&#x27;ll be interested to see what you come up with!<p>But why must demonstration of skill be limited to elite red-team style pentesting? You could devise challenges geared at demonstrating all sorts of knowledge (HIPAA, PCI, websec) basic or advanced.<p>If you&#x27;ve seen the sad state of PCI audits in particular these days, you&#x27;ll get my drift. I think there&#x27;s a huge opportunity here to raise the quality bar with your marketplace.