Next cohort: Operation: Huntsville — Sep 21

Prove the work.
Not the click.

A cyber range platform for offensive-security trainings. Each course defines its own adversary topology — any VM count, any role set — and every mission is unlocked by capturing a per-student flag from a live cloud range, in your browser, zero setup.

Built for tradecraft, not tutorials

Three structural advantages over generic LMSs and shared-flag CTFs — platform-wide, not per-course.

Per-student dynamic flags

Every flag is HMAC-computed from the student's seed and planted in their lab at provision time. Cheat-proof proof of work — no shared secrets to leak, course after course.

Browser-native labs

Apache Guacamole delivers full RDP and SSH to every range in a browser tab. Any OS, zero client install, zero VPN config — for any training on the platform.

Custom adversary topologies

Each training defines its own range — any VM count, any role set, any OS mix. Run the full kill-chain across a 2-box intro lab or a 12-VM red-team engagement, not isolated single-box puzzles.

The mission board

Jeopardy-style progression. Modules as columns, point tiers as rows. Missions unlock via flag capture — not self-attestation. Locked cells are visible but grayed; solved cells glow green. The board adapts to whatever modules a course author defines.

See it in action
Recon
10
Recon
20
Recon
30
C2
10
C2
20
C2
30
Beacon
10
Beacon
20
Beacon
30

Any adversary. Any topology.

The platform provisions whatever range a course calls for — from a lean two-box lab to a full enterprise engagement. Three example shapes a training can ship:

Intro Web Pwn
2 VMs
AttackerWeb target

A focused two-box lab for entry-level exploitation. Kali attacker against a vulnerable web app.

Live
Ghost Tier Tradecraft
5 VMs
AttackerC2VictimSIEMPivot

Full kill-chain range — attacker, C2, Windows victim, SIEM, lateral pivot. The platform's first shipped training.

Enterprise Red Team
8 VMs
AttackerC2DCEndpointsSIEMPivotExfil

An advanced engagement simulating a tiered enterprise network — domain controllers, multiple endpoints, and detection surfaces.

Topologies are defined per training in the admin panel — instance types, OS, EBS, and role names are all configurable. Ghost Tier is live today; more trainings ship as content is authored.

Featured training

Ghost Tier Tradecraft

The platform's first delivered course. A 5-VM adversary range built for end-to-end emulation — from initial foothold to lateral movement and detection.

View all trainings
Attacker
m5.xlarge · Linux
Agentic dev workstation
C2 Server
m5.large · Linux
Mythic C2 (Dockerized)
Windows Victim
t3.large · Windows
Beacon host
SIEM
m5.large · Linux
Wazuh appliance
Pivot
t3.medium · Linux
Second victim / lateral target

Want a different topology?

Trainings are fully authorable — define your own VM roles, instance mix, and mission set in the admin panel, then deliver it live or self-paced.

Browse the catalog