A cyber range platform for offensive-security trainings. Each course defines its own adversary topology — any VM count, any role set — and every mission is unlocked by capturing a per-student flag from a live cloud range, in your browser, zero setup.
Three structural advantages over generic LMSs and shared-flag CTFs — platform-wide, not per-course.
Every flag is HMAC-computed from the student's seed and planted in their lab at provision time. Cheat-proof proof of work — no shared secrets to leak, course after course.
Apache Guacamole delivers full RDP and SSH to every range in a browser tab. Any OS, zero client install, zero VPN config — for any training on the platform.
Each training defines its own range — any VM count, any role set, any OS mix. Run the full kill-chain across a 2-box intro lab or a 12-VM red-team engagement, not isolated single-box puzzles.
Jeopardy-style progression. Modules as columns, point tiers as rows. Missions unlock via flag capture — not self-attestation. Locked cells are visible but grayed; solved cells glow green. The board adapts to whatever modules a course author defines.
See it in actionThe platform provisions whatever range a course calls for — from a lean two-box lab to a full enterprise engagement. Three example shapes a training can ship:
A focused two-box lab for entry-level exploitation. Kali attacker against a vulnerable web app.
Full kill-chain range — attacker, C2, Windows victim, SIEM, lateral pivot. The platform's first shipped training.
An advanced engagement simulating a tiered enterprise network — domain controllers, multiple endpoints, and detection surfaces.
Topologies are defined per training in the admin panel — instance types, OS, EBS, and role names are all configurable. Ghost Tier is live today; more trainings ship as content is authored.
The platform's first delivered course. A 5-VM adversary range built for end-to-end emulation — from initial foothold to lateral movement and detection.
Want a different topology?
Trainings are fully authorable — define your own VM roles, instance mix, and mission set in the admin panel, then deliver it live or self-paced.