March 10-12

Hackathon became an integral component of our global event over the last two years, and with the revamping of CloudFest 2018, this popular pre-program returns with a new structure.

Introducing “CloudFest Hackathon” – our contribution to the open source community.

The new Hackathon format will find our amazing partners taking a back seat in order to support the community in coming together to contribute to real life open source problems.

The projects are sourced by the community till February 9th and will be up for vote from February 10th – 16th. See a list of submitted projects below and submit your project now!

List of Projects

Show your support for the open source community and join as a partner today!

Whether you are a hosting provider or ISV, it is imperative that we all look to invest in a strong open source community to ensure the continued development of our industry. Become involved today and see your team work side by side with experts from around the world.

Bonus – you decide how much you want to spend to participate! Click to learn more.

Become a Partner

Contribute to the future of open source and join us for CloudFest Hackathon.

Register now for a sponsored ticket to meet and code with fellow developer from the whole industry at our global event!

Register Now!


Encourage service providers, ISVs, open source communities, and freelance developers to collaborate.


Create real value by building real-world solutions.


Provide an opportunity for front-line, “in the trenches” developers and administrators to become more involved in an exciting, fun, and productive way.


The following projects have been submitted from the community.

Poll for final projects starts in February.

Project 1: „Automated security check for WordPress plugins“

28% of all websites run on WordPress. Vulnerabilities in WordPress plugins are therefore a threat to a great portion of the internet, leading to large-scale spam, DDOS, phishing etc.

A German company develops a software solution that scans PHP applications for security vulnerabilities by source code analysis. Based on this tool, this project works on an automated solution that will scan WordPress plugins in the I extensions directory for vulnerabilities – at the click of a button.

We are aiming at checking the 100 most popular WordPress plugins during the Hackathon.

Project 2: „One-time password for ProFTPD“

The File Transfer Protocol (FTP) is still very popular in our industry. We are facing the problem that users and service providers save the FTP passwords in their client software, exposing them to Trojans and similar threats. These circumstances have led to massive exploits.

This Hackathon project will develop a module for ProFTPD, the popular open source FTP server. This module will offer 1-time passwords based on the Yubico OTP protocol which requires a hardware token for processing the passwords.

Project 3: „Secure auto-updates for php applications“

One of the major problems in today’s IT security is making software updates a part of the software user’s schedule. We are dealing with unnecessarily outdated software and a vast number of known exploits.

On the other hand, automated updates imply a certain danger: If the update server itself is exploited it can issue a manipulated update which then will automatically infect all connected system.

Cryptographic signatures could be an easy solution for this problem: only the legitimate software developer (or team) would digitally sign the updates in question. Even after a successful attack on the update server, the software cannot be distributed because of the invalid signature.

Based on the PHP library libsodium we want to develop proofs of concept for popular web applications during the Hackathon.

Project 4: „Exploit filtering with mod_security for shared hosting environments“

The open source web server module mod_security allows filtering of attacks on web hosting environments of any size. Lacking available rule sets and issuing too many false positives, the module has not been very popular to date.

The web hoster service SIWECOS is now offering such rule sets for free (as a result of last year’s Hackathon). This Hackathon project will be a workshop for hosters, rule set developers and the developers of mod_security for implementing firewalls in shared hosting scenarios.

Project 5: „Domain Connect Example DNS Provider“

After last year’s successful Hackathon project building an example service that utilizes Domain Connect (http://domainconnect.org), this year we are going to build the other side of the protocol. We’ll build an example DNS Provider. We’ll build this on top of standard DNS implementations and APIs.

Project 6: „Secure Industrial IoT Solution Based on Trusted Modules and Open Source Cloud Components“

This Hackathon project will develop a whole MVP (Minimal Viable Product) for small companies who want to implement an affordable, secure, reliable and easy to implement IoT solution to monitor production equipment.
The MVP consist of different edge devices, like the Raspberry Pi Zero or the Aaeon UP^2 board, and a (on premises) cloud solution like the Open IoT Service Platform (OISP) (https://github.com/Open-IoT-Service-Platform). The first task is to configure the edge device (with OSS frameworks like Node-RED and libMRAA) to collect sensor data process it and send it to the backend. The Trust Module will be used to authenticate the device to the backend and provide needed attestations so that the backend can onboard the edge device secure and simple.
The second task is to connect with the OISP backend solution in the cloud which receives data from the edge device and sets up alert procedures to send messages to a mobile solution.
The third task is to develop a mobile solution with which the system could be monitored and where the alerts will be shown.


The CloudFest Hackathon sponsorship is now based on a fixed-fee batch model and not project related, thus eliminating the commercial characteristics of the event which will drive increased participation in this important event.

For every 1,150 EUR package purchased, you can send one own developer and support a community developer OR choose to directly support two community developers.

  • The connecting of development teams to tech experts of the industry
  • Incentive for your employees in the R&D department
  • Attract potential new employees for your company
  • Word-of-mouth marketing via high-profile industry influencers
  • Impactful branding; enhanced corporate image
  • Support of the open source community, who stand as an important component to the development of our industry
  • Purchase 3 bundles x 1,150 EUR (3,450 EUR) and receive a half-page program advertisement
  • Purchase 5 bundles x 1,150 EUR (5,750 EUR) and an additional VIP code is yours

Note: Cost per developer breakdown: 575 EUR includes

  1. Food and beverage during Hackathon
  2. 2 nights in 4* Europa-Park hotel March 10 – 12 (for consecutive nights participants need to book a room separately)
  3. Train ticket transportation within Germany; flights are not included


Day 1 – March 10th

12 pm Check in
Participants arrive and check-in their hotel rooms
1:30 pm Lunch
Casual get together
3 pm Welcome
A warm welcome to all participants and an introduction of the rules and objectives of the event.
3:15 pm Introductions
The participants introduce themselves to each other.
3:45 pm Project Presentation
The Community Projects get introduced.
4:30 pm Coffee Break
5 pm Development Selection
Teams choose the project that they are interested in solving and get immediately to work.
7 pm Dinner Served
Food and Beer in the workshop room to keep the teams working if they choose to.

Day 2 – March 11th

9 am Welcome
Welcome and recap of Day 1
9:15 am Development Time
1 pm Lunch Served
Teams allowed to work through lunch if they choose.
2 pm Development Time
7 pm Dinner Served
Food and Beer in the workshop room to keep the teams working if they choose to.

Day 3 – March 12th

9 am Welcome
Welcome and recap of Day 2
9:15 am Development Time
1 pm Lunch Served
Teams allowed to work through lunch if they choose.
2 pm Closing
The teams submit their finished projects to the panel of experts for review


Event Details

  • 3-day event, March 10th – 12th at CloudFest 2018
  • Presentation of results on March 13th in the main.FORUM

Attendee Profile

The event is targeted at developers with the following skills:

  • Solid knowledge in one or more programming languages of your choice, i.e. Perl, Python, C, JavaScript, PHP, Bash, Go
  • Basic understanding of the technical basics in the cloud/hosting industry (common services, network protocols etc.)
  • Experience with a version control system (Git, SVN, CVS)

We also welcome applications from Dev-Ops, Sys-Admins and other specialists with solid knowledge of the cloud/hosting industry for our projects to have a good mix in the teams.