Skip to content
CloudPandas Panda Quest
HomeLearning pathPracticeLeaderboardBlogServicesLog in DEEN Start for free

CloudPandas GmbH ·

Learn, collect points, win.

Your company is only as secure as your team's knowledge, and that's exactly what you build here, in a playful way. You can look forward to short learning units, hands-on tasks and a game where every point counts and you can win something every month. Start for free now and get your first points.

Start for free
  • A few minutes per card
  • Only pseudonyms on the leaderboard

Join

A username and an email address are all you need. The leaderboard only shows usernames. You log in with a passcode by email and an authenticator app.

Check your inbox

No email? Check your spam folder. The link is valid for 10 minutes.

Already have an account? Log in

Dashboard

Hello

Your next step

How to get started

  1. Learn Open a learning unit and complete the quiz.
  2. Earn a shot Every correct answer gives you a shot.
  3. Play Use your shots in the level and collect bonus points.

Your points & prize draw

Points this month 0
Progress towards the prize draw 0 / 5’000

Draw

Per category (points / monthly cap)

Threshold reached, from now on every point counts for the leaderboard.

    Total points (all months) 0

    Participation and mix

      Up to 5,000 points, a monthly cap applies per category; after that, everything counts for the leaderboard. Terms of participation

      Preview Preview of the slingshot level: panda on a cloud and a tower of threat blocks

      Slingshot level

      Available shots 0

      Redeem code

      Where do I get codes?

      • In webinars
      • In blog articles
      • At events with CloudPandas

      Learn and practise

      Learning path and practice

      • Learning path Microsoft security Seven topics around Microsoft security with four learning units each. Points for opening and a quiz per unit.
      • Practice tasks Seven practice tasks with matching and fill-in-the-blank exercises (+300 points each) and a self-check of your domain (no points).

      Quest

      Game level

      Sign up to collect points, redeem codes and earn shots for the level.

      Start for free

      Slingshot level

      Preview Preview of the slingshot level: panda on a cloud and a tower of threat blocks

      Quest

      Leaderboard

      Top 10

      Full leaderboard

      Quest

      Leaderboard

      Monthly and all-time ranking. The leaderboard only shows pseudonyms.

      Learning path

      Learning path Microsoft security

      Seven topics, four short learning units each. Each unit gives you +100 points when you first open it and +100 points for the quiz.

        Practice

        Practice tasks

        Two separate areas: practice tasks with points and a self-check of your domain without points.

        Tasks with points

        With points

        +300 points per task, partial points for every correct answer. Practice tasks count for up to 1,200 points per month towards the prize draw.

          Terms of participation Panda Quest

          Version 2026-10, effective from 24 October 2026.

          1. Organiser

          The monthly Panda Quest prize draw is organised by CloudPandas GmbH, Zugerstrasse 84, 6330 Cham, Switzerland ("CloudPandas").

          2. Eligibility

          • You can take part if you are at least 18 years old, have a Panda Quest account and your place of residence is in Switzerland or Liechtenstein.
          • Employees of CloudPandas GmbH and their relatives are excluded.
          • Only one account per person is allowed.

          3. Period

          The prize draw takes place monthly. The relevant period is the calendar month (time zone UTC). The draw usually takes place on the first working day of the following month.

          4. Requirements per month

          You take part in a month's prize draw if all of the following requirements are met:

          1. You collected at least 5000 capped points in the month. Up to this threshold, at most the respective monthly cap counts per category.
          2. You attended at least one webinar in the month (live or as a recording with a code).
          3. Your account is not flagged (for example due to suspected multiple accounts or manipulation).

          Points are calculated exclusively on the server. There is no entitlement to points that were not recorded due to technical faults.

          5. Draw procedure

          The winner is determined by a verifiable random draw:

          1. All eligible accounts of the month are sorted by account ID in ascending order. A SHA-256 hash is computed from this list (account ID and pseudonym) (candidate hash).
          2. A random secret seed (32 bytes) is generated for the draw.
          3. The winner index is calculated from HMAC-SHA256(seed, candidate hash). A rejection sampling procedure ensures that every eligible account has the same chance of winning.
          4. Seed, candidate hash and result are logged, so the draw can be verified afterwards. Only one draw is carried out per month.

          6. Prize

          The monthly prize is as announced on the prize draw page for the respective month.

          7. Notification and acceptance

          The winner is notified by email at the address given when signing up. If the prize is not accepted within 14 days of the email notification, it lapses and the prize is drawn again.

          8. No cash payment

          The prize is not paid out in cash and is not transferable. There is no entitlement to a cash payment or exchange.

          9. Exclusion

          CloudPandas may exclude accounts from participation and revoke points if there is manipulation, use of technical aids to collect points, multiple accounts or another breach of these terms, or if there is reasonable suspicion thereof.

          10. Free participation

          Participation is free of charge and does not require any purchase.

          11. Data protection

          CloudPandas processes your data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

          • We store your pseudonym, email address, age confirmation, the time and version of the accepted terms of participation, optionally your newsletter consent, as well as your points and answers.
          • The leaderboard shows only pseudonyms, never email addresses.
          • IP addresses are not stored in plain text. We only store a hash of the shortened address range (IPv4 /24, IPv6 /48) using a secret key that changes monthly. It is used to detect multiple accounts and abuse and is deleted after 30 days.
          • Technically necessary cookies: the session cookie for signing in and the cookie for your language choice. Optional cookies are set only with your consent; Panda Quest currently uses none.
          • More information is available in the privacy policy of CloudPandas GmbH at cloudpandas.com/privacy.

          12. Changes and termination

          CloudPandas may change, suspend or end the prize draw or these terms at any time, in particular if proper execution cannot be guaranteed. Changes to these terms apply from the following calendar month; months already in progress are drawn under the previous terms.

          13. Applicable law and place of jurisdiction

          Swiss law applies. The place of jurisdiction is Cham, Switzerland. Mandatory statutory provisions, in particular those protecting consumers, remain reserved.

          This English version is a translation. In case of discrepancies, the German version prevails.

          Error 404

          Page not found

          This page doesn't exist or no longer exists.

          To the home pageTo the learning path

          Blog

          From the CloudPandas blog

          Every article contains a code – redeem it in your dashboard.

          21 Oct 2026SecurityDMARCArticle in German

          DKIM: Who signed this message?

          DKIM signs the message itself, and the signature survives every intermediate hop that doesn't change anything. Whoever signed it isn't automatically the sender, though.

          Read article
          29 Sept 2026SecurityMicrosoft 365DMARCArticle in German

          SPF: Who may speak on your behalf?

          SPF answers a single question: may this server deliver mail on behalf of this domain? Why the ten-lookup limit exists and why SPF breaks with forwarding.

          Read article
          9 Sept 2026SecurityDMARCArticle in German

          NIS2 and DMARC: Why no law tells you what to do

          Does NIS2 make DMARC mandatory? It isn't in the law directly, but through the "state of the art" and supply chains, email security becomes relevant for almost every company.

          Read article

          All articles on the blog

          Services

          CloudPandas services

          Assessments

          Mail Security Assessments

          Managed Services

          Managed Services

          Get in touch

          CloudPandas

          Panda Quest: learn, collect points and, with a bit of luck, win.

          DeutschEnglish

          Panda Quest

          Learning pathPracticeBlogLeaderboard

          CloudPandas

          Mail SecurityManaged ServicesContactcloudpandas.com

          Legal

          Terms of participationPrivacyImprint
          © 2026 CloudPandas GmbH
          Please rotate your device

          Loading level …