The oldest and most respected wargame platform in security. Bandit is the definitive Linux command line training for beginners — free, no account needed, still the recommended first step
Carnegie Mellon’s free Capture The Flag platform. 400+ challenges across six categories — all free, all year-round. The best starting point for students exploring cybersecurity.
The world’s most beginner-friendly cybersecurity practice platform. Guided rooms, in-browser machines, and gamified progression — the community’s unanimous recommendation for beginners.
Practical offensive security training at a price the community respects. Real penetration testing skills used in professional engagements — from $30 per course with lifetime access.
The deepest web application security platform available. 200+ exercises organized into earnable badges — from basic SQL injection to advanced deserialization and JWT attacks.
The free, official web security platform from Burp Suite’s creators. 200+ labs covering every major vulnerability class and a live-exploitation BSCP certification — all free.
The original free, offline vulnerable machine repository. 800+ downloadable VMs — all free, no internet required. The machines that built an entire generation of penetration testers.
The official OSCP practice platform from Offensive Security. PG Play is free. PG Practice is built by the same team that writes the OSCP exam.
The most respected hands-on practice platform in the world. 500+ vulnerable machines, Pro Labs, CTF competitions, and a global community — the definitive OSCP training ground.
The premier platform for defensive security practitioners. Real SOC scenarios covering phishing, SIEM, malware analysis, digital forensics, and threat hunting — all mapped to MITRE ATT&CK
A hands-on SOC analyst simulation with a real alert queue. Phishing investigation, SIEM analysis, malware triage, and case documentation — exactly as you’d do it in a real job.
The official free network simulation tool from Cisco. Build, configure, and troubleshoot complete topologies — routers, switches, firewalls, ACLs, and VPNs — without physical hardware.
The advanced network simulation platform that runs real OS images. Cisco IOS, FortiGate, and MikroTik RouterOS in multi-vendor topologies — the standard for CCNP and CCIE prep.
Huawei’s official free network simulation platform. Practice real VRP commands on AR series routers, S switches, and USG firewalls — essential for every HCIA, HCIP, and HCIE candidate
Free Kubernetes and cloud-native attack simulation from the makers of Kubescape. Container escapes, namespace traversal, and cloud metadata exploitation — the attack surface labs miss.
AI-generated adaptive cybersecurity scenarios for advanced practitioners. Every session is unique — scenarios evolve based on your decisions in real time.