You're paid to assess and defend, not configure.
Ludus deploys and configures complex networks with a single click.
Configure with ease
Define configuration at a high level - let Ludus handle the details
- Install Active Directory with as many secondary DCs as you want
- Install any Microsoft Office version and bit-ness on a Windows host
- Sysprep Windows hosts before AD joins
- Install arbitrary Chocolatey packages
From Debian to deployment
Easy installer and template builds take you from zero to ready-to-deploy easily
- One command - fully automated install
- Templates built from checksum verified ISOs - no random vagrant boxes
- Easily add your own templates backed by Packer
Fully customizable
Create complex networks and deploy as many VMs as your host can handle!
- Define up to 255 VLANs (/24) with arbitrary firewall rules
- Add arbitrary ansible roles to VMs
- Directly connect with SSH, RDP, VNC, or KasmVNC to any range VM
- Generate an ansible inventory for automated configuration outside of Ludus
- Internal DNS with easy to set rewrites - simulate any domain
OPSEC built in
Do you trust that binary from GitHub? Or want to keep the telemetry generated by your latest in-house tools from leaking to threat intel?
- Easily and quickly isolate VMs from the internet
- Snapshots are taken before isolation and reverted before internet is turned back on
- Allow specific domains or IPs while isolated to test live C2 channels or techniques that require internet
One control tower for every range
Watch deploys progress, jump into VMs, manage users and groups, and keep an eye on the cluster — all from a browser, no CLI required.
For individuals, homelabs, and researchers
Open Source · AGPLv3 · Self-hosted
Standard setups included
Active Directory, domain controllers, Microsoft Office, Windows, Linux, even macOS.
Run it anywhere
Any Debian host with virt support — bare metal, mini-PC, cloud nested-virt VM.
Access from anywhere
Built-in WireGuard server. Connect securely from anywhere in the world.
Isolate your research
Keep your latest tools and techniques from leaking telemetry to Microsoft or EDRs.
Templates & roles
13 templates ship out of the box. Bring your own with Packer. 35,000+ Ansible Galaxy roles work.
Open source, AGPLv3
Full source on GitLab. Active development, accessible community.
For teams and organizations
Pro / Enterprise · Web UI · Priority support
Drag-and-drop Web UI
Self-hostable, offline-capable. SSO-ready (SAML / OIDC). Pro and Enterprise tiers.
Multi-user range isolation
User groups, per-engagement ranges, group managers without admin rights.
Cluster support
Auto-detects Proxmox clusters. Spread VMs across nodes by RAM and CPU headroom.
Enterprise role catalog
Detection, C2, access, identity integrations maintained by Bad Sector Labs.
REST API + CI/CD
Every CLI action is an OpenAPI 3.0 HTTP call. Wire Ludus into your pipelines.
Priority support
Direct line to the team that builds Ludus. SLA available in Enterprise tiers.