Cyber Defense Range

Cyber Defense Range — Hands-on Defensive Security Drills

Most security training tells you what to do and stops there. When an alert fires at 11 pm, knowing the theory is not the same as having worked through a log queue, spotted a phishing header, cross-referenced a patch gap, and written up an incident timeline under time pressure. The Cyber Defense Range is a browser-based lab that puts you through exactly that sequence — log triage, phishing recognition, patch auditing, and incident command — with an AI instructor that listens to your decisions, flags mistakes in real time, and produces a scored business-readiness report when you finish. One sitting. No multi-day course required.

What you'll be able to do

After completing the Cyber Defense Range you will be able to:

• Work through a realistic log queue, separate signal from noise, and document findings in a format an auditor or manager can read
• Identify phishing indicators — header anomalies, sender spoofing, payload links — quickly enough to stop a click before it spreads
• Conduct a structured patch audit, map missing patches to common vulnerability categories, and prioritise remediation by risk level
• Run an incident response workflow from initial detection through containment and post-incident review, using the same command structure recommended by NIST SP 800-61
• Hand a business-readiness report to a manager, compliance officer, or external auditor backed by your drill scores, not just a certificate of completion

How it works

Step 1 — You work through each drill module in the browser.

No VM to configure, no software to install. The lab environment loads realistic event data: actual-format log entries, constructed phishing emails with real header structures, a patch inventory with deliberate gaps. You interact with the data the way you would on the job.

Step 2 — The AI instructor watches every move and talks back.

If you dismiss a log entry you should have escalated, the instructor tells you why before you move on. If you miss a phishing indicator, it points to the specific field. Correction happens at the moment of the mistake, not in a debrief video you watch later. The AI also accepts typed questions, so you can ask for reasoning rather than just accept a correction.

Step 3 — You receive a scored business-readiness report.

At the end of the drill cycle the lab compiles your decisions across all four modules into a structured report: what you caught, what you missed, where your response time lagged, and an overall readiness score. The report is formatted to be shared — with your manager, included in audit evidence, or kept as a personal benchmark before you run the drill again.

What's inside

The Cyber Defense Range is approximately 20 hours of active lab work across four modules:

• Log triage exercise — a realistic event dataset drawn from common SIEM output formats; you classify, escalate, and document entries while the AI scores your triage decisions
• Phishing recognition drill — a set of constructed email samples at varying difficulty; scored on which indicators you catch, how fast, and whether you correctly assess the risk level of each message
• Patch audit workflow — a simulated asset inventory with deliberate patch gaps across common vulnerability categories; you produce a prioritised remediation list and justify your ordering
• Incident command simulator — a scenario that runs from initial alert through containment and post-incident review; the AI plays the role of other responders, escalation contacts, and management, so you practice communication under pressure as well as technical decisions; auto-generates your business-readiness report at completion

The lab is rated for all experience levels. The earlier modules build the foundation; the incident command simulator is demanding enough to be genuinely useful to someone who already holds a security certification and wants structured repetition.

Who it's for

Small-business IT administrators managing security without a dedicated team.

You are the analyst, the patch manager, and the incident commander. Practicing each role in a low-stakes environment before a real event is the point of this lab.

Compliance officers preparing for a security audit.

You need documented evidence of security drills, not a PDF certificate. The business-readiness report gives you a dated, scored record of a completed drill cycle.

Cybersecurity students who want structured practice beyond capture-the-flag competitions.

CTF challenges are useful for offensive technique. The Cyber Defense Range covers the defensive workflow that most entry-level security roles actually require: log review, phishing triage, patch management, and incident response documentation.

How it compares

Frequently asked questions

Do I need to install any software to run a hands-on defensive security drill?

No. The entire lab runs in your browser. There is no VM to configure, no Docker environment to set up, and no operating system requirement beyond a reasonably current browser.

Is the Cyber Defense Range suitable for someone with no prior security experience?

The lab is rated all levels. The log triage and phishing modules are accessible to someone whose background is general IT support. The incident command simulator will be more demanding, and that is deliberate — it should feel like pressure without being an obstacle on the first two modules.

What does the business-readiness report actually contain?

The report compiles your scored decisions across all four modules: entries you escalated correctly, indicators you missed, your patch prioritisation versus the suggested ordering, and your incident response choices. It includes a summary score and is formatted to be shared with a manager or included as audit evidence for a security review.

How does this compare to a cybersecurity certification course for incident response?

Certification courses teach you concepts and test your recall. This lab tests your execution — whether you can actually work through a log queue, run a patch audit, and command an incident response scenario. The business-readiness report documents that you performed the drill, which is different from documenting that you passed a multiple-choice exam.

Can I use the scored drill results as evidence for a compliance audit?

The business-readiness report is dated, tied to your account, and records the decisions you made rather than just time spent. Whether it satisfies a specific compliance framework depends on the framework and your auditor, but it is structured to be usable as drill documentation.

What is the difference between the $59 one-time price and the $19 per month all-access option?

The $59 price gives you permanent access to the Cyber Defense Range specifically. The $19 per month all-access plan covers every lab in the Jade Labs catalogue, which makes sense if you expect to work through multiple subjects rather than this one lab alone.