Cyber ranges fornational defense
Ludus is a self-hosted cyber range platform built by former federal red team operators for the teams who run offensive cyber, threat intelligence, and detection work behind the firewall. One install spins up realistic enterprise networks on hardware you own. No cloud round trip. No customer data leaving the box.
What Ludus delivers in the field
Offline install
Coming SoonStand up Ludus where the internet doesn't reach. Mirrored repositories and air-gapped templates for classified and disconnected environments.
Range baking
Coming SoonTurn any Ludus VM — or a whole range — into reusable VM templates. Capture the state, freeze the build, ship it to other operators.
On-prem, behind the firewall
Customer data, tradecraft, and equities stay on hardware you own. No third-party storage, no cloud telemetry, no compliance round trip.
Per-engagement isolation
One clean range per program. Group managers and per-user isolation prevent cross-contamination between assessments.
REST API + CI/CD
Every CLI action is an OpenAPI 3.0 HTTP call. Build, deploy, destroy, repeat — unattended, scriptable, repeatable.
Open core, AGPLv3
Auditable source on GitLab. No black-box stack to vet, no vendor lock-in on the platform layer.
Why agencies and operators pick Ludus
Running in Fortune 100 security orgs, national defense and intelligence teams, AI labs, and R1 research universities today.
Built by former operators with experience in CYBERCOM running OCO and DCO missions for the teams doing offensive and defensive cyber today.
Auditable source. The community edition is the same engine the platform tier runs on — nothing to reverse engineer before approval.
No customer data, telemetry, or tradecraft leaves the box. Ludus is designed for the environments where that matters most.
Past performance
Selected engagements, ordered by relevance to defense and public-sector programs.
- .01Fortune 100 manufacturerOct 2024 – present
Captured stage-2 malware behaviour commercial sandboxes can't observe — on a Ludus-emulated enterprise that defeats environmental keying and anti-analysis checks.
- .02Top global red team consultanciesOct 2024 – present
Per-engagement isolated range infrastructure on customer hardware. One range per assessment — zero cross-contamination between programs.
- .03Bespoke training providerJuly 2024 – present
Per-student isolated course material delivered through Ludus. Each cohort runs on its own clean range; reset between groups in minutes.