Building cyber ranges on Skillable’s platform

Organizations running cyber ranges face a familiar set of challenges: building environments that feel real, scale for any audience size and reset cleanly between sessions without stressing your infrastructure team.

One of the capabilities of Skillable’s lab platform is building, deploying and managing cyber ranges: isolated, repeatable environments designed for offensive, defensive and incident response scenarios. Whether the goal is a self-paced skills check, an Instructor-led team exercise or a live event simulation, organizations use Skillable as a cyber range platform because we handle the infrastructure so your team can focus on the scenario and user experience.

For teams that want accelerated design and build support, Skillable’s Professional Services team can partner at any stage, from initial architecture through delivery.

Jump ahead

What is a cyber security range?

A cyber range is a controlled environment where individuals or teams can safely practice realistic security events without touching production systems.

Effective ranges share four qualities:

Realism – Participants face threats that reflect how attacks and defenses actually work
Isolation – Nothing inside the range touches live systems
Repeatability – The same exercise runs cleanly for one learner or many
Speed – Environments spin up fast enough to run live events, not just scheduled trainings

Skillable is built to support all four.

Features: How does Skillable support cyber ranges?

Skillable’s platform is well suited for a broad set of cyber range models, including:

Single-learner and self-paced skills validation

Instructor-led, guided scenario training

Red, blue and purple team simulations

Incident response and tabletop-style exercises

Live event-based team competitions and conference deliveries

Networks

Skillable supports multiple networking configurations. This provides range authors with direct control over how systems communicate and what participants can interact with.

Private – Fully isolated environments with no internet access for sensitive scenarios or controlled team-based exercises
Web Access (NAT) – Regulated internet access using network address translation for exercises requiring external connectivity that is controlled and safe
Web Access (Public IP) – Direct public exposure for specific scenarios that require it

With shared networks, VLAN options and visibility controls, these features make it easy to represent internal systems, public-facing machines and segmented networks all in the exercise.

Cloud resources

Realistic cyber ranges increasingly require cloud environments alongside virtual machines. Skillable supports cloud resource provisioning across all three major platforms:

Microsoft Azure – Azure resource group template deployments and provisional learner access
Amazon Web Services – AWS CloudFormation stack support
Google Cloud Platform – GCP resource provisioning

These integrations allow organizations to simulate cloud-centric attack paths, hybrid configurations and modernized infrastructure scenarios reflecting how common modern infrastructure looks today.

Bring Your Own Cloud

Organizations can run exercises against their own Azure, AWS or Google Cloud subscriptions and accounts rather than Skillable’s managed subscriptions. This matters most when:

Custom virtual machine images are required for the exercise environment
Direct access to subscription logs and cloud-native cost reporting is needed
Custom domain names for participant accounts are required
Existing cloud agreements or discounts should apply to lab usage

For organizations that prefer less operational overhead, Skillable’s managed subscriptions are also available. Skillable handles provisioning, monitors abuse and manages quota requests on your behalf.

Life Cycle Actions

Life Cycle Actions (LCAs) are automated tasks that execute at defined moments in a lab’s life cycle, allowing range authors to automate operational scaffolding that would otherwise require manual setup before each launch.

LCAs can run scripts, call web requests, send notifications and prepare or clean up resources automatically. Some example trigger points include:

Post-build – Configure the environment after initial provisioning
First displayable – Trigger actions when the lab interface first loads for the participant
Save and resume – Execute on paused or returning sessions
Tear down – Clean up resources and reset environment state after completion

This makes ranges feel operational as evidence is pre-staged, activity pre-simulated, tasks validated and cleanup handled automatically after every session.

Shared class environments

Shared class environments connect individual participant labs into a common exercise space with shared networks and shared virtual machines. Multiple roles operate in the same environment simultaneously – which is what makes group-based simulations feel real.

This model is well-suited for:

Red versus blue and purple team scenarios
Instructor-led and command-center style simulations
Multi-role exercises where participants need to operate in the same environment

Instructor over-the-shoulder participant monitoring

Instructors running shared exercises can observe participant activity in real time. This gives trainers visibility into individual lab environments without interrupting the exercise and is useful for assessing progress, providing targeted guidance or identifying when a team is stuck.

Session recording capabilities support post-exercise review and debrief, giving Instructors a structured basis for feedback.

Custom VM endpoints

Custom VM endpoints let range authors expose RDP, SSH, HTTP and HTTPS services directly to the lab client as selectable tabs eliminating jump-box workflows that complicate many range designs.

For more complex network topologies, the Endpoint Access Gateway (EAG) simplifies access into nested or segmented environments. This is particularly useful for network security scenarios and virtualized infrastructure designs where participants need clean, direct access without extra configuration overhead.

Benefits of using Skillable's infrastructure

Built for events

Cyber ranges are becoming an important staple for security conferences and live industry events. Running a range at scale and supporting hundreds of simultaneous participants requires a platform built for that pressure.

Skillable’s pre-instancing capability lets operators spin up and warm environments before participants arrive. Templating and standardization of lab environments ensures every participant starts from an identical state. Batch controls and stock presets let event teams define target launch windows and maintain a rolling supply of ready environments throughout the event.

The result: Participants launch immediately, exercises run consistently and the operations team is not firefighting infrastructure on the conference floor.

Ease of setup and teardown

One of the hidden costs of running cyber ranges in-house is the operational overhead around setup and cleanup in addition to manual resets, stale environments and custom teardown scripts. These compounding costs add up quickly.

Skillable automates the full lab lifecycle. Life Cycle Actions handle pre-configuration, evidence staging and resource cleanup throughout the lab’s cycle in an automated way and require no manual intervention. When a session ends, Skillable tears down cleanly and completely, leaving no residual state for the next participant.

For recurring training programs or live events, pre-instancing keeps environments prepared for participants to jump in. Launch is near instant. Teardown is automatic. The operational weight of maintaining the range shifts from your team to the platform.

Achievements and badging

Completing a cyber range exercise can mark the start of a recognized credential path and not just a one-time activity.

Skillable integrates with Credly to issue verifiable digital badges when participants complete exercises or meet defined requirements. Other badging platforms are also supported through Skillable’s TMS-based achievements infrastructure, allowing organizations to connect range completions to the credentialing tools they already use.

For organizations running certification prep, vendor enablement programs or team readiness evaluations, this turns exercise completions into documented, shareable proof of skill.

Realistic environments

Cyber ranges work when they feel real. Skillable supports the full stack of environment types that make that possible, including layered networks, cloud resources, shared environments, nested virtualization and direct access to real tools and interfaces.

This allows ranges to reflect how security teams actually work and not just abstract simulations. These are operational environments where participants use the same tools, make the same decisions and face the same constraints as in a real incident.

Secure by design

Skillable helps teams find the right balance between realism and control. Authors can define how systems communicate, what participants can access, how roles are separated and how cloud permissions are scoped to the exercise.

That level of control is what makes it possible to run meaningful simulations with environments realistic enough to train on and controlled enough to deliver at scale.

Example: Skills validation cyber range

A leading online university partnered with Skillable to build a scored cyber range for skills validation, using phishing and ransomware – two of the most prevalent threats facing organizations today. Participants move through realistic, hands-on scenarios and are evaluated on their responses, producing objective evidence of readiness at scale.

Why choose Skillable as your cyber range platform?

Skillable gives organizations a single platform for the full cyber range lifecycle: design, deployment, automation, scaling and delivery. Whether the goal is a tabletop incident response exercise, hands-on skills validation or a team-based threat emulation, Skillable makes it easier to build ranges that are realistic, reusable and ready to run.

Get flexible environment design, direct learner access, group collaboration, lifecycle automation and repeatable delivery on one platform without the operational overhead of building and maintaining infrastructure in-house.