An honest Cyber Skyline review for cyber security hiring

A few years ago I sat a Cyber Skyline assessment for a SOC analyst role at CrowdStrike. A couple of years later I sat through their sales demo from the buyer side, evaluating them for a SOC team I was building myself. So I have lived experience of the product from both ends, the candidate side and the hiring side.

This is an honest review of Cyber Skyline as a cyber security hiring platform - what it was, what it is now, and what cyber hiring teams should do given what has changed.

The short version

Cyber Skyline does not currently sell a hiring product. Browse cyberskyline.com today and the three products listed are Professional (self-paced learning for individuals), Competition (the National Cyber League gameplay environment), and Lab Kit (cyber education for schools and clubs). There is no candidate assessment line on the site, no hiring positioning, no screening product page. The hiring product some of us evaluated a few years ago is gone, or at least no longer foregrounded.

If you landed here because someone on your team remembered Cyber Skyline doing assessments, the honest update is: that product line is no longer what they sell. Most of this review explains what they used to be, what changed, and what it tells cyber buyers about the choice of platform now.

What Cyber Skyline used to be on the hiring side

When I evaluated them as a buyer, the hiring-side experience worked roughly like this. The owner of the company, who handled most customer-facing work himself, would jump on a call to review your role requirements. He would then build you a custom test on his side, calibrated to the skills your role demanded. You would log in, try the assessment yourself to validate it, and he would give you access to a company admin account so you could send invitations, track candidate progress, and view performance insights as the assessment results came back.

The actual challenge content, when you got to it, was good. Real hands-on scenarios. Hack a server, crack a password, analyse network traffic, reverse-engineer a malware sample. Not multiple-choice. Not Google-able. Genuinely the right shape of test for cyber roles. Whoever was building those challenges cared about content quality, and the platform reflected that.

What the hiring product did not have, even at its peak:

• Self-serve test creation. Every test was bespoke, built manually by the owner. There was no library you could browse, no template you could clone, no way to build your own.
• A visible challenge library. The catalogue was hidden. You got the challenges the owner picked for your role; you could not see what else existed.
• Custom challenges from a prompt or scenario. You could not say “I need a Kerberoasting hunt against this AD environment” and get one back. The challenges were what the owner had built, full stop.
• AI-generated assessments from a job spec. Predates the era. Not a knock on its own, but a real gap by 2026 standards.
• Custom branding. White-label or co-branded candidate experiences were not part of the product.
• A modern admin UI. Dated even years ago. By 2026 standards, aggressively dated.

The pace of product development was glacial. From the outside it had the feel of a small team running things hands-on, where the founder cared about the work and the work was good but the company was not built to scale into a venture-grade platform.

Alongside hiring, Cyber Skyline has always run the National Cyber League CTF in the United States and held in-person CTF events. Hiring was one thread among several, never the central thing the company organised itself around.

What Cyber Skyline is now

The current site does not sell hiring assessments. The product line is:

• Professional. Self-paced learning for individuals, sold as a personal subscription. Marketing copy is about “keep building real-world cybersecurity skills” and “build the skills employers want.” Aimed at career-minded learners.
• Competition. The National Cyber League gameplay environment, scaled for college and professional players. Team and individual modes, advisor analytics, season-based.
• Lab Kit. Pre-built cybersecurity challenges for schools, clubs, after-school programmes and community events. Aimed at educators.

The customer logos on the homepage (CrowdStrike, Capital One, Cipher Tech, Synchrony, Palo Alto, MITRE, UConn, Pinterest) sit under “great companies we’ve worked with” - past tense, no specific product or use case attached. They are trading on history.

There is one line at the bottom of the current homepage that is the residue of the old hiring product: “Cyber Skyline has scalable solutions for all your hands-on cybersecurity assessment needs. Drop us a line and learn how Cyber Skyline can help you develop and identify cyber skills.” The phrase “identify cyber skills” is the hiring use case, but it is not a product line anymore. The path is “drop us a line” - not a product page, not pricing, not self-serve.

What was actually good

Credit where it is due, and there is a fair amount.

• Content quality was high. Real systems, real CVEs, real exploitation scenarios. Cyber Skyline did the hard work of building hands-on challenges when most of the assessment industry was still selling multiple-choice quizzes with a “cyber” label slapped on. That mattered then and it still matters now.
• The candidate experience was decent. I sat one of their assessments as a candidate. The challenges felt like real cyber work. I did not feel patronised by Wikipedia-grade trivia. That is more than most cyber assessment products achieved at the time.
• NCL is genuinely respected. The National Cyber League CTF has produced real cyber career pipelines for thousands of US students. That is a contribution to the industry, not a marketing claim.

If you are a learner, an NCL competitor, or an educator, none of the product changes are bad news. Cyber Skyline still does the things it has always done well, and arguably does them better now that they are the centre of the company.

What did not work, and what it tells you

The structural limits of the old hiring product line up exactly with what cyber buyers expect from a hiring platform in 2026:

• No self-serve workflow. Every test was a phone call and a custom build. That does not scale to cyber teams hiring at any meaningful volume.
• No challenge library you could browse, no way to author your own. You were locked into what the owner chose to build for you.
• No AI assistance. No way to paste a job spec and get a calibrated test back. No way to prompt for a custom scenario.
• No custom branding. The candidate experience carried Cyber Skyline’s marque, not yours.
• No integrity tier calibrated for external candidates. The platform was built for trusted environments (NCL competitors, training contexts) and the integrity surface reflected that.
• A dated UI that signalled “small team, slow roadmap” the moment you opened the dashboard.

Why the hiring product faded matters, because it tells you what to look for in the replacement. The market moved towards self-serve, AI-assisted, custom-branded, integrity-aware hiring tools, and Cyber Skyline did not move with it. The current pivot to learning, competition and education is a sensible retreat to where the brand has genuine community equity. It is not a comeback as a hiring tool.

Who Cyber Skyline is for now

• Individual cyber learners who want hands-on practice on their own time. Professional subscription.
• Universities, colleges and professional teams running NCL competitions. The Competition product is purpose-built for that and the operational maturity is real.
• Educators running cyber clubs, classrooms or community events. Lab Kit is shaped for that use case.

Cyber hiring teams are not on this list anymore. Not because the company is bad, but because the company is no longer organised around your problem.

When CyberHire fits the gap

CyberHire was built for the use case Cyber Skyline retreated from. Cyber-only hiring platform, AI test generation from a pasted job spec, full cyber stack content (SOC, IR, pentest, cloud, AppSec, threat intel, malware, GRC), real Linux environments per candidate, three integrity tiers calibrated for external candidates, custom branding, public pricing, self-serve trial without a sales call. The shape of the product is a direct response to the gaps that frustrated me when I evaluated Cyber Skyline as a buyer years ago.

If your contract is up for renewal and the hiring product is no longer there, the practical migration playbook is here.

One honest sentence

Cyber Skyline did real work on hands-on cyber assessments at a time when most of the industry was still selling multiple-choice quizzes. That work has not been carried forward into a modern hiring product, and the company has gracefully retreated to where its community lives. Cyber hiring teams need a platform that did carry it forward.