Practice. Defend. Build. Compete.
Explore the range
Every product line, buyer walkthrough and builder tool on one page. Every walkthrough on this page is read off a live estate rather than narrated, and every product line links to the lab it is sold on.
Product lines
The fifteen things Forge sells, each with its own comparison against the platforms that sell it alone.
Watch a run
Read-only walkthroughs of a real run — no sign-in, nothing scripted, every line read off a live estate.
- A guided lab, end to endThe brief, the mail that started it, the detections raised and the graded case.
- A scenario's own SIEMOne person's private detection console, breach walk, cases and coverage gaps.
- The SOC screenA live attack read through detections, the AI analyst, the case and the coverage line.
Build and tune
Author the attacker, the playbook and the detections your teams will be graded on.
- Attacker profile builderDescribe the adversary and the emails, detections and breach walk are built from it.
- Attacker profile libraryKeep several adversaries, mark one active and reuse it across every scenario.
- Playbook builderWrite, compile and debug a response playbook, and see where it pauses for a person.
- Bring your own alertsUpload a real detection export and watch it land on the estate's breach timeline.
- Forge RangesBuild connected emulated estates and rehearse how systems, people and configurations respond.
- Team ExercisesPractice coordinated response under changing technical conditions.
- Architecture RehearsalRehearse a configuration change and inspect the resulting paths and access.
- Skills & OnboardingMake people perform the work, not recite it.
- Range CompanionUse your high-fidelity range where fidelity matters most.
- Emulation & CompatibilitySee covered operations, evidence, execution details and known boundaries.
Go hands-on
The consoles themselves: labs, the SOC screen, the agent range and team programs.
- AI SOCAn agent triaging this estate's own detections, graded against the person supervising.
- Agent evaluationScore an AI agent and its supervisor apart, on the same run.
- Team programsAssign, track and report a whole team's practice, counted from the real library.
- The lab libraryEvery scenario in this build, filtered by role, difficulty and framework.
- Readiness reportResponse clocks, one readiness score and the framework coverage behind it, read off real runs.
- Forge OffensivePractice an emulated engagement, record CVSS 3.1 findings and export a pentest report.
- Exercise diaryBook an exercise window, repeat it on a cadence, assign the roster and keep the score of every sitting.
- Remediation planWhat each thin or failed run says you should redo, in the order to redo it.
- Guide: pause, inject, resumeHow a facilitator throws a new event into a running exercise without losing the clock.