1) The hard version you sell to costumers
2) The easy version that runs in a fake server you own, and is only a game.
If someone wins the game in version 2, you give a discount if they buy version 1 (or a t-shirt) (or a png that s/he can print and hang in the wall) (or a congratulations message).
[Is this a good idea? I don't know.]
Our product is not a CTF! It inserts honeypots in our customer's infrastructure (through WAF and/or DNS configuration) to categorize attacks (manual vs. automated, targeted vs. random, persistent vs. changing) and attackers (profile creation, activity tracking despite IP rotation, skill assessment).
We then produce Threat Intel data feeds, instrument scenario seen on the honeypots and automatically replay them against our customer's assets, etc.