Store data
- Store status
- Coming soon
- Scheduled release
- 6 November 2026
- Positive reviews
- —
- Total reviews
- —
- Release date
- 6 November 2026
24-hour and 7-day views use hourly peaks from ten-minute samples. Longer views use retained daily peaks. Up to 24 recent event markers are shown per layer.
Recent views use Steam's daily review activity. Longer views use weekly totals, retained by SteamWatch.
EARLY ACCESS UPDATE - RANSOMWAREWhile this update marks the end of a successful week in Next Fest, the party is only about to start with early access around the corner, planned for the 6th of November. The full game is being processed by the steam team both for the Linux and Windows build, as preparations continue for for the launch. Keep an eye out for the CTF challenge top 10 that is dropping later! If you have not tried it, give it a try and you might find your way through the server. Find the CTF here: Negotiate the ransomA big drop for operators: a new ransomware endgame, a cross-app manhunt, and a much harder stealth game. Drop ransomware and the victim writes back. A real person opens a secure channel on the web and you talk it out: prove you can decrypt, raise the demand, ease off, threaten to leak, or settle. There is a clock, and a tainted, traceable payout at the end. Push...
Read full update on Steam ↗NEW FEATURE - SECURITY DEVICES & AGENTSHigher tier networks are actively monitored. Defended LANs include a dedicated monitoring appliance, a Splunk SIEM, a Cisco Firepower IPS, or a Suricata IDS. Every monitored box runs one security agent matching to the appliance - Splunk's splunkd forwarder port 9997- Cisco Secure Endpoint's ampdaemon, port 443- Elastic's filebeat port 5044- Gateways and FreeBSD boxes have syslog-ng on port 514While the agent is running it makes you easier to get traced on that box. You can spot it in the known commands ps, ss, netstat and lsof, read its config off disk, once you have root, take it offline with kill, systemctl stop, or service stop on FreeBSD. Going dark raises your heat and drops a line in the box's syslog, disconnect with that line still there and the target reports a strike against you. Remove that first with "logcleaner --selective" for the cl...
Read full update on Steam ↗NODE: Protocol | Beta Update (Oct 9–12) New & improved \ Vane's Operator Handbook text is now fully selectable and can be copied, every command can be clicked to be copied, and there's a new search in the sidebar to filter topics. \ You now get a heads-up alert the moment a target or corporation opens an investigation on you, so an escalation never catches you cold. \ Terminal commands now stream their output live as they run, and linpeas comes up with its verdict so you see the result first. \ The botnet control page in the browser now scales to the full window height \ Added an in game help topic covering Nmap and how IDS detection works, please read this. \ The Orbital Uplink Terminal and BUILD DOSSIER are now documented in the SIGINT help topic. \ Added a tip pointing you to the cyber.info BBS when you are in the terminal Bug fixes \ Desktop app windows no longer let their content...
Read full update on Steam ↗NODE: Protocol -> Development update\ build 1c59a80\ patch 2026.10.05Singeplayer \ Improved file honeypots, when a player is being monitored in the network, honeypots will be deployed on the filesystem. \ Improved dynamic user logins, on various linux/unix servers\ Balance for selling loot has been adjusted on darkmarket to fit harvesting loot from rooted servers\ Apache and Nginx now contain real webpages based on sysadmin there deployment (including subdirs)\ New help topic: Loot and Hints, plus trace visibility documented on the World Map\ Squid is now showing the correct kernel information for reconnaisanace \ ps aux finally agrees with who / w on breached hosts. the live session list is consistent now\ file browser: patched a crash when renaming files\ every gateway and the bank mainframe now ships a guaranteed root pathFor all game modes\ Gateways are now always hardened, since...
Read full update on Steam ↗Singleplayer\ Real databases: Database servers now hold actual databases you can download and sell on the dark market. Sizes range from 50 MB to huge. Transfers take real time (60 seconds to 2 minutes) but run in the background, and the payouts are well worth it.\ SSH keys & lateral movement: SSH keys can now be found in users' home directories and used to move laterally through networks. (See the help topic.)\ New command dig: Use it for reconnaissance. TXT records hide breadcrumbs that can be decoded with tools like base64, xxd and rot13. (See the help topic.)\ FBI Hack: After a raid, you may get a chance to raid the FBI. It's a hidden feature, so you'll have to figure it out yourself.\ Domain registrar: The registrar behind WHOIS data can be hacked to partially unlock new domains. How? Figure it out.\ Citrix NetScaler: A new gateway flavor with its own exploits and its own applianc...
Read full update on Steam ↗Patch round #2While the game is gearing up for Early Access on 6 November the beta testers have been playing and streaming the game live on twitch and YouTube. This has been loads of fun and also brought some bugs to light that are again patched. Many thanks again to those who helped and keep them coming! Bug Fixes \ sqlmap: `--dump` and `--file-read` now save extracted files to your own `/home/downloads` with origin tracking, so dead-drop missions finally accept them. \ metasploit: hitting a database server now cleanly points you to `sqlmap` with the right version of the database service \ Mission Board: finishing a mission clears the ACTIVE tab right away instead of leaving the completed contract sitting there. \ Wallet: sending BTC to unknown addresses are blocked, and over/underpayments rejected. \ The NAC controller was reporting on gateway scans. It is correctly an IPS sensor no...
Read full update on Steam ↗News While the game is still in beta many of the beta testers stream the game live and this is where we find bugs and quality of live adjustments. Most of these can be easily fixed and after 2 days another round of patching is being pushed live for the beta group. Many thanks to those who help me get closer to early access and make the difference while the game is ramping up for its demo release during next fest on 19 October. The demo has just been approved and is cleared after steam review. What has been done \ cp and mv added to the terminal. Move or copy a file you downloaded and it stays recognized as that file. This won’t affect mission objectives.\ Tilde command (~) now means your home folder in every command that takes a path.\ Mass-delete in Mesh Mail. Select multiple emails and clear them in one go. Mission-critical mail is protected and can’t be deleted this way.\ Analyze n...
Read full update on Steam ↗Steam currently lists 6 Nov 2026 as the release date.
EARLY ACCESS UPDATE - RANSOMWAREWhile this update marks the end of a successful week in Next Fest, the party is only about to start with early access around the corner, planned for the 6th of November. The full game i…
NEW FEATURE - SECURITY DEVICES & AGENTSHigher tier networks are actively monitored. Defended LANs include a dedicated monitoring appliance, a Splunk SIEM, a Cisco Firepower IPS, or a Suricata IDS. Every monitored box…
NODE: Protocol | Beta Update (Oct 9–12) New & improved \ Vane's Operator Handbook text is now fully selectable and can be copied, every command can be clicked to be copied, and there's a new search in the sidebar to f…
NODE: Protocol -> Development update\ build 1c59a80\ patch 2026.10.05Singeplayer \ Improved file honeypots, when a player is being monitored in the network, honeypots will be deployed on the filesystem. \ Improved dyn…
Singleplayer\ Real databases: Database servers now hold actual databases you can download and sell on the dark market. Sizes range from 50 MB to huge. Transfers take real time (60 seconds to 2 minutes) but run in the…