Cyber Policy Shark Tank

What is it?

In the Cyber Policy Shark Tank, cyber policy innovators pitch solutions to Congressional staffers who have the tools, influence, and track record for putting ideas into action. From legislation and hearings to informal outreach, public statements, and letters, the potential policy actions are as diverse as the challenges they aim to address. With the opportunity to gain not only support but also strategic partnerships and guidance, participants can showcase their knowledge of Legislative levers of power, passion, and ingenuity while taking proactive, positive steps to address some of the most challenging global issues today.

The rules are simple, the impacts can be meaningful

You have 3-4 minutes to touch on the problem, a specific step that can address it, what to expect if successful, and what you need from the Sharks to make it happen. Sharks have 7-8 minutes to ask questions, suggest tweaks, and offer to invest their time, energy, and political capital alongside you (the cyber policy innovator) to make it happen.

The primary goals of the event are to help the cybersecurity researcher and practitioner community exercise their practical understanding of how to use public policy to achieve desired effects. The time constraints and Q&A from Sharks is meant to ensure participants can articulate the value of their ideas to public policy decision-makers quickly and clearly. The investments the Sharks are willing to make give participants the best chance to see their idea put into action. Drawing from a diverse pool of Sharks offers participants the ability to find at least one willing to invest, as long as they are focused on achievable goals using authorities, levers, and targets that Congressional staffers have at hand.

In addition, the Sharks will award points for each pitch, with prizes given for the best idea and the one most likely to end in disaster (as judged by the Sharks). Ideas will be evaluated for bestness with the following scoring system, which is also a good guide for what the Sharks will look for in order to figure out who they want to work with.

• 4 points for using the right levers, targets, and authorities of the Legislative branch (formal or informal)
• 3 points for how likely the idea is to address the problem it sets out to
• 3 points for its feasibility or likelihood to be implementable
• 1 point for creativity (yes, this event goes to 11 😎)

How to enter and what to expect

All are welcome to enter. When submissions open, we will announce via social media and email. Submitters will be required to provide their name (or handle/alias), contact information, title of the idea, a brief description, and a 1-page (no more than 600 words) decision brief covering the relevant information. More details on each of these sections will be provided in the form.

Selected cyber policy innovators will be notified in advance of the event. Further detail on the format of the pitch sessions, names of some of the Sharks, and timing of next steps will be sent at this time. Selected innovators can then practice their pitch, refine the 1-pager if necessary, and research the Sharks they may be pitching.

Preliminary rounds will be held (virtually or in person, depending on the event) before the final. Each innovator will present their ideas to Sharks in a preliminary round. This provides Sharks and organizers the opportunity to downselect the best candidates, and gives innovators the opportunity to get feedback on their ideas, whether they are selected for the final round or not.

Three finalists will be notified after the preliminary rounds are completed. Innovators can incorporate feedback and polish the pitch so it is stage-ready.

The final round of the three top pitches from preliminaries will be conducted live as the last session of the event. The format will be similar to the preliminary round, with different Sharks and a little additional time provided for the pitch and Sharks' response if possible. The session will conclude with an announcement of results and presentation of fabulous prizes to the winner.

While you are free to submit a pitch on any topic you'd like, ideas centered on cybersecurity impacts to life, safety, and national security are most likely to move forward.

Sign up for our notification list to hear when the next submission window opens.

Who are the Sharks?

Like with the TV show, your goal is to get one (or more) Sharks to invest in your idea. Will you try to persuade one of them a lot or all of them a little? Will you propose something ambitious and inspiring or bite-sized for a quick win? Those decisions lie with you, and we recommend you do some of your own digging to figure out how you want to present to them. The identities of the Sharks will be announced closer to each event.

The Sharks are a mix of current and former Congressional staffers. They are all people who have the ability to help you get your idea into action, and they are all people who have a track record of doing so. They are not just there to judge you; they are there to help your ideas succeed.

Past events

• Washington, DC, January 2025 The first ever Cyber Policy Shark Tank was held at Hackers on the Hill, with five innovators pitching five experienced Sharks. The ideas were bold and innovative, with the Sharks providing helpful and candid feedback. The presentations sparked further collaboration between public policymakers and the cybersecurity researcher community.
• Washington, DC, June 2025 The Shark Tank returned as the closing session of Hackers on the Hill at Critical Effect 2025.
• Washington, DC, June 2026 The next Shark Tank is the closing session of Critical Effect 2026 (June 17-18). Learn more about Hackers on the Hill DC 2026.