The easiest way to deploy infrastructure

An open-source, API driven infrastructure management system

Ludus Web UI — available with Pro and Enterprise plans
Drag-and-drop topology design with infrastructure provisioning

You're paid to assess and defend, not configure.

Ludus deploys and configures complex networks with a single click

YAML Configuration

Configure with ease

————————————————————

Define configuration at a high level - let Ludus handle the details

  • Install Active Directory with as many secondary DCs as you want
  • Install any Microsoft Office version and bit-ness on a Windows host
  • Sysprep Windows hosts before AD joins
  • Install arbitrary Chocolatey packages
Features 02

From Debian to deployment

——————————————————

Easy installer and template builds take you from zero to ready-to-deploy easily

  • One command - fully automated install
  • Templates built from checksum verified ISOs - no random vagrant boxes
  • Easily add your own templates backed by Packer
Features 03

Fully customizable

—————————————————————

Create complex networks and deploy as many VMs as your host can handle!

  • Define up to 255 VLANs (/24) with arbitrary firewall rules
  • Add arbitrary ansible roles to VMs
  • Directly connect with SSH, RDP, VNC, or KasmVNC to any range VM
  • Generate an ansible inventory for automated configuration outside of Ludus
  • Internal DNS with easy to set rewrites - simulate any domain
Features 04

OPSEC built in

——————————————————

Do you trust that binary from GitHub? Or want to keep the telemetry generated by your latest in-house tools from leaking to threat intel?

  • Easily and quickly isolate VMs from the internet
  • Snapshots are taken before isolation and reverted before internet is turned back on
  • Allow specific domains or IPs while isolated to test live C2 channels or techniques that require internet

Stop configuring, start testing

Ludus takes the repetitive work out of setting up and managing infrastructure for developers, QA, red teams, blue teams, and every color in between.

Standard setups included

Active Directory, domain controllers, Microsoft office, Windows, Linux, and even macOS support included

Deploy where you want

Any Debian host with virtualization support and enough resources will run Ludus - even cloud VMs!

Access from anywhere

Built in WireGuard server allows secure connection from anywhere in the world

Isolate your research

Keep your latest tools and techniques from leaking telemetry to Microsoft or EDRs

Open source

Ludus is under active development and open source with an AGPLv3 license

Deploy for your team

Designed for teams, Ludus supports multiple isolated ranges on a single server

Compare Ludus Plans

Choose the plan that matches your team and deployment model.

Select a plan

Pro Features

For professionals

Price
$3,500
Billing Cadence
per seat / year
Invoice
Core Platform
CLI-driven automationIncluded
Community role libraryIncluded
Open-source*Included
Pro Capabilities
Web UI for visual range designIncluded
Router roles for turnkey networkingIncluded
Pro Roles CatalogIncluded
Licensing
Commercial Use PermittedIncluded
Support
Community supportIncluded
Priority support via dedicated Discord ChannelIncluded
SLA-backed email supportNot included
Enterprise Capabilities
Enterprise Roles Catalog (e.g., Zeek)Not included
Outbound WireGuardNot included
Windows Licensing via KMSNot included
CTFd IntegrationNot included
Fully managed infrastructureNot included
Turnkey deployment and maintenanceNot included

*Ludus is open source (AGPLv3), and all editions share the same core backend. Pro and Enterprise include closed source plugins.

Subscribe for updates

Join our newsletter to learn more about Ludus
and Bad Sector Labs.