Build the skills that hold the line.
Live targets, isolated ranges, and a skill graph connecting every technique you learn.
Knowledge built like a system.
Every concept builds on another.
Explore a structured skill graph that connects theory, tooling and real infrastructure into one continuous path, from a first HTTP request to a full range compromise.
0%path lit
Curriculum designed for real work.
Modules stack from foundations to full-chain red team ops. Open one to see what you leave able to do.
Networking, Linux and the HTTP request lifecycle. You leave this track able to read a packet capture and script a client from nothing.
No prerequisitesInjection, deserialisation, SSRF and auth bypasses against applications that fight back. Every module ships its own container.
Live targetsBreak and harden real services on isolated targets. Every module ships a container you spawn yourself, a flag you have to earn, and a writeup you file afterwards.
Live targetsMulti-host topologies over VPN. Pivot from a DMZ web host into an internal segment your own machine cannot route to.
VPN requiredFull-chain engagements against a running range: initial access, persistence, lateral movement, then a report a client would actually accept.
Advanced tierDraw the network. Arena builds it.
Trainers and admins compose their own labs on a canvas. Drop in virtual machines, routers, switches and isolated networks, wire the ports, then deploy the whole topology to Proxmox in one click.
Drag, drop, wire
Place machines, routers and networks on the canvas and connect them port to port. What you draw is what gets provisioned.
Real appliances
Boot vendor router and firewall images, then push startup config over the serial console, with no guest agent required.
Isolated by default
Each network becomes its own SDN segment with static addressing, so two teams can run the same lab without ever seeing each other.
Version it like code
Every topology exports to the Arena DSL or YAML, so a lab can be reviewed, diffed and re-imported on another deployment.
A full attack box, waiting in the cloud.
Every operator gets an Outpost: a persistent, isolated desktop that boots on demand, sits beside the lesson you are reading and routes straight into any range you own. Nothing to install locally.
Your files survive
Home directory, keys, wordlists and notes persist across every stop and start.
Toolchain already there
Recon, exploitation, reversing and forensics tooling, versioned and kept current for you.
One tunnel, every range
Your Outpost is wired to the VPN, so any lab you spawn is reachable the moment it turns green.
Side by side with the lesson
Read the module on the left, work the target on the right. Record the session, or hand a replay to a trainer.
Showdown
Invite an operator. Both of you spawn the same challenge at the same second, and the first valid submission ends it. No flag to paste: a submitter binary inside your own instance calls the win home, so the only thing that decides the match is who breaks it first.
The accepter picks the ground
Whoever takes the invite chooses category and round length. Arena serves a challenge neither of you has opened before.
Nobody wins, nobody leaves
If the clock runs out clean, sudden death drops in on an easier variant at half the timer and 0.7x the rating swing.
Rating that actually moves
Standard ELO at K=32. Beating someone above you pays out hard. A draw costs both sides five points.
Plans that scale with the work.
Start on the free tier and move up when you need isolation, network ranges or a machine of your own. Change or cancel your plan whenever you like.
- Shared labs that you join in seconds
- Full challenge catalogue, including retired challenges
- Two concurrent deployments
- Writeups, discussions and solve history
- Showdown 1v1 duels and public leaderboard
- Everything in Pro, plus:
- Outpost, your own persistent attack box
- Isolated labs, a private instance nobody else is on
- Network ranges, multi-host topologies over VPN
- Four concurrent deployments and longer TTLs
- Private leaderboard and session recording
- Everything in Advanced, for every seat
- Single sign-on with OIDC, SAML, LDAP and SCIM provisioning
- Your own tenant, private content and org leaderboards
- Topology builder and custom challenge authoring
- Trainer portal for cohorts, assignments and reporting
- Self-hosted or air-gapped deployment