Interactive Live Labs
A live SOC environment inside the ticket—launches with a single click from your browser, no VMs, no setup, and no high-spec machine required.
Tickets with the 'Live Lab' badge open a full operational environment: compromised machines, network traffic, and real response tools. You execute commands yourself, contain the attack, then return to the ticket to write your decision.
Zero Setup
No multi-gigabyte VMs, no Docker, no network configurations. Everything runs in the browser, even on a modest laptop or tablet.
Real Actions
Investigate processes and connections (netstat, tasklist), terminate malicious processes, add firewall rules, isolate machines, then verify threat containment.
Six Scenario Engines
Command & Control (C2), Ransomware, Cloud, Web Applications, Operational Technology (OT), and Vulnerability Management—with 180+ live labs, in environments that vary by ticket industry.
Availability by Plan
At least two free live labs in each specialty. The Pro plan unlocks all advanced labs, and team plans give every seat full Pro plus group management and progress reports.