Every workbook, policy pack, membership and tee you buy this month with code CYBERAWARE26 earns a guaranteed Nitrokey prize pack, and bonus entries for the NitroPhone. Or enter free. Either way, the whole community unlocks prizes together.
Sign in with a free CISO Marketplace account (just your email), fill in four fields, and you're in the NitroPhone draw. That's the free entry. Nothing to buy.
20% off at ciso.diy, cyberpolicy.shop, generatepolicy.com, SecurityByDesign.shop and the membership. Your net spend across all of them sets your tier.
Prize packs ship guaranteed at each tier while stock lasts. Higher tiers also stack bonus entries into the Oct 31 grand-prize draw.
Tiers are cumulative across all stores for the month. Net spend after the 20% code. Hardware purchases count too but aren't discounted.
| Tier | Net spend | Gets you there | Your prize pack | Draw entries | Left |
|---|---|---|---|---|---|
| 1 | $25 – $74 | A tee, a policy template, a consumer PDF | Stickers + lanyard + Nitrokey bag | +1 | Unlimited |
| 2 | $75 – $199 | One compliance kit, a Pillar build guide | Tier 1 + USB data blocker + case | +5 | — |
| 3 | $200 – $499 | Org-tier kit, GeneratePolicy, a bundle | Tier 2 + Nitrokey Passkey or Start | +10 | — |
| 4 | $500 – $999 | Practitioner membership, vCISO-tier kit | Tier 2 + Nitrokey 3 (USB-A or C) | +25 | — |
| 5 | $1,000 – $1,999 | M&A kit vCISO tier, Register Family bundle | Tier 4 + second Nitrokey 3 + full swag | +50 | — |
| 6 | $2,000+ | Practice license, Phase 0 security deposit | NitroPhone 5a or NovaCustom NUC | +100 | — |
Hardware is excluded from the 20% code, so instead every key sold ships with the accessories and jumps you straight to Tier 2.
Wk 1 Passwords & passkeys · Wk 2 MFA · Wk 3 Device hygiene · Wk 4 Grand prize. Each podcast episode carries a QR that lands here.
Every entry moves the bar for everyone. Hit a milestone and that prize enters the grand-prize draw. Share your link, bring a colleague, unlock the phone.
/enter there to link this entry. · Sign outThree categories, free to enter, judged by the CISO Marketplace team. Winners are featured on the podcast and the blogs.
Write a 1-page incident scenario with three injects. Winner's scenario ships in tabletopsec.com for everyone.
Prize: Nitrokey 3 + TTX-01 Executive Tabletop KitVideo or write-up of a security device, app or policy taken apart. Practitioner audience; show what you found.
Prize: NovaCustom NUC BoxShort vertical video. Tag us on TikTok or YouTube. The best ones run as clips across the CISO Marketplace channels.
Prize: Nitrokey Passkey + merch pack, weeklyEvery October episode carries a QR with that week's code. Redeem it for double entries.
Short answers here; the full Official Rules are linked in the footer and govern if anything conflicts.
No. Signing up with your email is a full entry to the grand-prize draw. Purchases earn guaranteed prize packs (that's a reward for buying, not a lottery) plus a stated number of bonus entries. A free entrant can win the NitroPhone; the odds per entry are identical.
A lottery is prize + chance + payment. We remove the payment: there is always a free way in, and the free entry has the same odds per entry. Prize packs on the ladder involve no chance at all: hit the tier, get the pack. Skill-contest prizes are judged on merit, so they're not chance-based either.
QSai LLC, a Texas limited liability company doing business as CISO Marketplace. Nitrokey, NovaCustom, YouTube, TikTok and Podbean are not sponsors and have no responsibility for this promotion; they supply the hardware or host our content, nothing more.
The grand-prize draw and hardware prize packs are open to residents of the United States aged 18+. If you're outside the US you can still buy with the code and receive digital rewards (workbooks, credits, membership perks), and you can enter the skill contest; hardware shipping and import duties are the reason for the limit. Void where prohibited or where registration or a permit would be required.
Random draw on November 5, 2026 from all eligible entries received by October 31, weighted by entries, read live on the podcast. Winners are emailed and have 7 days to respond and return a prize acceptance form; otherwise we redraw. Winner first names and state/country are posted here and read on the podcast.
Prizes are income to the winner. Under current US rules (2026), a prize worth $2,000 or more triggers an IRS Form 1099 and we'd need a W-9 from you; individual prizes here fall below that, but we'll still ask for a W-9 if the combined value you win crosses it. Winners outside the US are responsible for their own taxes and any import duty.
You sign in with a free CISO Marketplace account, which verifies your email. We use your details to run the draw and contact winners. The newsletter is a separate checkbox and is never required to enter; unsubscribe anytime and you keep your entry. We don't sell the list. EU/UK entrants: our lawful basis is consent; email us to access or delete your data.
Yes. Anyone 18+ can enter with their own account, and each entrant gets a share link worth +1 entry per friend who enters (up to 25). QSai LLC staff and contractors, and the judges, are not eligible for prizes.
Prize pack counts are live on this page and decrement as tiers are claimed. When a tier's hardware is gone we substitute the next-lower pack plus double bonus entries, and we tell you at checkout before you buy.
CYBERAWARE26 is 20% off digital products and membership through Oct 31; one code per order, not combinable with member pricing. Hardware (Nitrokey, NovaCustom) isn't discounted but its full price counts toward your tier, and the Nitrokey 3 ships with a free case and data blocker during October.