Cybrary ForgeCYBRARY / FORGE
Demos

See Forge in action.

Start with a recorded walkthrough — no sign-in needed. Interactive replays and guided range experiences open in the product after you sign in.

Fidelity proof · 31/31 automated checks passed

Five demonstrations. One evidence trail.

Scan all five in under a minute. These are real product captures from fictional, emulated scenarios; pass status comes from deterministic automated runs, not the images.

Open public evidence →
Product capture for demonstration A; open the admin-only runnable lab.
Product capture for demonstration A; open the admin-only runnable lab.
A

F20, F21, F25 · Automated pass

Firewall change affects the estate

Unsupported commands fail clearly; supported policy changes alter reachability.

Product capture for demonstration B; open the admin-only runnable lab.
Product capture for demonstration B; open the admin-only runnable lab.
B

F22, F23 · Automated pass

Operating-system work persists

Windows and Linux state survives refresh and reads back through a second interface.

Product capture for demonstration C; open the admin-only runnable lab.
Product capture for demonstration C; open the admin-only runnable lab.
C

F25 · Automated pass

SOC containment changes the case

Isolation, blocking and account disablement change state; unauthorized actions are denied.

Product capture for demonstration D; open the admin-only runnable lab.
Product capture for demonstration D; open the admin-only runnable lab.
D

F24 · Automated pass

Two people share one estate

Two authorized seats converge on sequenced state, reconnect, and replay deterministically.

Product capture for demonstration E; open the admin-only runnable lab.
Product capture for demonstration E; open the admin-only runnable lab.
E

F26–F29 · Automated pass

Practice becomes authorized assessment

Exports carry provenance; findings become sanitized labs; Anvil enforces signed scope.

CISA KEV 2026

The 2026 CISA labs — 39 to open

Simulated only. Each card shows its honest coverage level. See the reference setup.

A full CTF event, played back

Recorded walkthrough · No sign-in

Standings, captures and the final push in the real Arena theater.

The ransomware crisis scenario

Recorded walkthrough · No sign-in

Timed injects, obligation clocks and the live score in the real Crisis Sim room.

From Scenario Studio to the war room

Recorded walkthrough · No sign-in

The scenario library, the Studio role editor, then the finished exercise's war room, news feed and facilitator board.

A finding from command to report

Recorded walkthrough · No sign-in

Scope, approved command, original output and the reviewed finding in Forge Anvil.

Northbridge Payments becomes a digital twin

Recorded walkthrough · No sign-in

Five dated sources become a reviewable estate model, drift decision and recovery rehearsal.

A week at the two-site reference estate

Recorded walkthrough · No sign-in

A week of simulated readings played back hour by hour — reporting, quiet devices, uptime and overlay accuracy.

Live telemetry, from twin to crisis

Recorded walkthrough · No sign-in

The twin dashboard's telemetry meter replaying a day of readings, then the Meridian Freight crisis scenario it feeds.

The twin becomes an exposure plan

Recorded walkthrough · No sign-in

Approved facts become ranked paths, choke points, predicted fixes and verification.

Drive it yourself

These interactive replays run in the real product — sign in to open one.

Cybrary Forge product screen
Interactive replay · Sign in required
A full CTF event, played back

Ten competitors, four teams, 75 minutes — scrub the board and every desktop together.

Event organizers: see how a competition runs and is reviewed.

Cybrary Forge product screen
Interactive replay · Sign in required
From uploaded PDF to contained incident

A recorded human-agent investigation of indirect prompt injection, step by step.

SOC leads: see an analyst supervise an AI agent through an incident.

Cybrary Forge product screen
Guided range experience · Sign in required
Walk a shared range

One run end to end: the mailbox, the breach, the case — the way a buyer sees it.

Team leads: see a team incident from mailbox to case.

Cybrary Forge product screen
Guided range experience · Sign in required
Watch one lab, start to finish

The brief, the mail, the breach walk and the graded case.

Practitioners and managers: see a lab from brief to debrief.

Cybrary Forge product screen
Interactive replay · Sign in required
Baseline against candidate

Five frozen cases, three trials each — why a faster agent was blocked from release.

AI and security owners: see how an agent release is evaluated.

Cybrary Forge product screen
Full exercise · Sign in required
Write and debug a response playbook

Compile it, read back exactly what it changes and where it stops for a person.

Detection and response engineers: build and debug a playbook.

Running a sales call?

Proof Room lets a buyer drive a tailored scenario on the call and see the emulated effects.

Open Proof Room →

Put your people and AI to work.

Browse the library, try a demo, or talk to us about your team's goals.

See Forge in actionBrowse labs & scenariosTalk to our team