Platforms · 12

Security training platforms compared: profiles and a fact grid

Short answer

Twelve platforms, with Reflex Security listed first and the rest alphabetically, with what each one sells across the four training types and the practical facts buyers ask about first: free start, published price, evidence and session length. Each profile lists strengths and limits from the vendor's own pages. Nothing here is scored or ranked.

By The Range Desk · Cyber Range Compare · Published 2026-10-11 · Updated 2026-10-13

Desk research from public vendor, standards and regulator pages read on 27 September, 11 October and 13 October 2026. Profiles follow our published method; we did not run the products.

Which platforms are covered?

Filled target: the platform sells this training type on the pages we read
Hatched target: sold with a condition (an add-on, an adjacent product, or part of the type)
Dashed target: not in our sources (it may exist; we did not find it)

Reflex Security
A crisis simulation that replaces the scripted tabletop: it builds a live crisis from your real environment, runs an adaptive adversary and pressured stakeholders, and produces an after-action report.
Sells 1 of 4 types, 0 with a condition
Read the profile
BreachRx
An incident response management platform whose AI Tabletops module runs exercises in the same system the team uses in a live incident, then feeds the gaps back into playbooks and owners.
Sells 1 of 4 types, 0 with a condition
Read the profile
Cloud Range
A live-fire cyber range provider that runs attack simulations across IT, OT/ICS, cloud and hybrid environments on a replica of the customer's network, now also validating AI agents.
Sells 3 of 4 types, 1 with a condition
Read the profile
Conducttr
A crisis exercise platform for building and running your own exercises, which simulates news, social media and messaging around the players.
Sells 1 of 4 types, 0 with a condition
Read the profile
Cyberbit
A cloud cyber range for SOC and incident response teams, now combined with RangeForce, with Crisis Sim 360 sold as an add-on that brings executives into the same incident.
Sells 3 of 4 types, 1 with a condition
Read the profile
Cytactic
A cyber incident response management hub with a simulation generator: five ready-made crisis simulations and an AI engine that builds new ones from the organisation's profile, run in a Simulation Mode inside the platform.
Sells 1 of 4 types, 0 with a condition
Read the profile
Hack The Box
A technical training platform with a large learner community, Academy modules and Professional Labs, plus Crisis Control, a platform-led tabletop with optional hands-on investigation.
Sells 3 of 4 types, 1 with a condition
Read the profile
iluminr
An operational resilience exercising platform for boards, executives and crisis teams, from 3–5 minute microsimulations to facilitated tabletops, with evidence mapped to regulations.
Sells 2 of 4 types, 1 with a condition
Read the profile
Immersive Labs
One platform, Immersive One, with hands-on labs, cyber drills, a live-fire range on the customer's own tools, and crisis simulations.
Sells 4 of 4 types, 1 with a condition
Read the profile
KnowBe4
Security awareness training and simulated phishing for the whole workforce. It trains employees to spot and report threats, not the incident response team to run an incident.
Sells 1 of 4 types, 0 with a condition
Read the profile
SimSpace
A range vendor that now presents itself as AI Proving Grounds: it builds an environment, runs an attack against your team, your tools or your AI agents, and shows the results.
Sells 1 of 4 types, 0 with a condition
Read the profile
TryHackMe
Browser-based labs with a free tier and a large community, plus SOC and threat hunting simulators, live breach exercises and AI-driven tabletop exercises for business teams.
Sells 3 of 4 types, 1 with a condition
Read the profile

How do the platforms compare, fact by fact?

From each platform's own pages, read 27 September or 11 October 2026. Not in our sources means we did not find it; it may exist.
Fact	Reflex Security	BreachRx	Cloud Range	Conducttr	Cyberbit	Cytactic	Hack The Box	iluminr	Immersive Labs	KnowBe4	SimSpace	TryHackMe
Cyber range	Not in our sources	Not in our sources	Sold	Not in our sources	Sold	Not in our sources	Sold with a condition	Not in our sources	Sold	Not in our sources	Sold	Sold with a condition
Hands-on lab libraries	Not in our sources	Not in our sources	Sold	Not in our sources	Sold	Not in our sources	Sold	Not in our sources	Sold	Not in our sources	Not in our sources	Sold
Tabletop and crisis simulation	Sold	Sold	Sold with a condition	Sold	Sold with a condition	Sold	Sold	Sold	Sold	Not in our sources	Not in our sources	Sold
Awareness training	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Sold with a condition	Sold with a condition	Sold	Not in our sources	Not in our sources
Hands-on keyboard work	Partly Note Technical players can run plain-English queries against simulated logs, endpoint telemetry and network traffic in an Investigation Console; there is no lab library or range.	Not in our sources	Matches Note Live-fire attack simulations and 1,500+ hands-on labs and team exercises.	Not in our sources	Matches Note 100+ team exercises and 2,800+ solo labs on a cloud range.	Not in our sources	Matches Note Academy modules and Professional Labs, plus optional hands-on investigation inside Crisis Control.	Not in our sources	Matches Note Browser labs against live systems, and a live-fire range.	Not in our sources	Partly Note Teams work in an environment SimSpace builds and attacks; lab content is not described on the homepage.	Matches Note 800+ labs and simulators.
Executives and non-technical roles take part	Matches Note Built for technical, legal and executive teams; AI agents fill absent seats, including the CEO.	Matches Note Enterprise-wide exercises bring security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners together.	Partly Note Simulation-supported tabletop exercises are listed; who takes part is not described.	Matches Note Built for crisis teams, with role-specific content for the players and exercises in person, online or hybrid.	Partly Note Crisis Sim 360 includes executive, legal, communications and risk teams, sold only as an add-on.	Partly Note Generated exercises include stakeholder discussions, with crisis communication and legal disclosure agents in the platform; an exercise format for executives or the board is not described.	Matches Note Crisis Control covers executives, SOC, IT, legal and communications.	Matches Note Board-ready dashboards and exercises for executives and crisis teams.	Matches Note Crisis Sim targets executives, incident leaders and cross-functional teams; digital tabletops list audiences including the board.	Not in our sources	Not in our sources	Partly Note Tabletop exercises are aimed at managers, practitioners and security leaders.
Built around your own environment or tools	Matches Note Reflex states it builds the crisis from your real environment; org context listed as AWS, GitHub, Cloudflare and six more.	Partly Note The Exercise Agent builds scenarios around the organisation's business units and dependencies and tests its own response playbooks; a scenario built from its live environment or telemetry is not described.	Matches Note A customised replica of your network with licensed versions of real SOC tools.	Not in our sources	Partly Note Exercises use commercial tools from CrowdStrike, Splunk, Palo Alto Networks, Fortinet and Microsoft; building them from your own environment is not described.	Partly Note Scenarios are built from the organisation's profile and data.	Partly Note Six documented baseline scenarios, tailored on request.	Partly Note An AI Context Engine uses business continuity and GRC data during scenarios (August 2026 update).	Matches Note Dynamic Threat Range: a live-fire attack on your own stack.	Not in our sources	Matches Note Teams can bring their own tools into the environment SimSpace builds.	Partly Note Scenarios are generated from your industry, attack vector and tech stack, and teams can upload their own playbooks.
Reports or evidence for auditors, boards or regulators	Matches Note An after-action report in which every finding traces to the moment it came from; reports map to SOC 2, ISO 27001 and DORA.	Matches Note After-action reports, executive summaries, gap analyses and prioritised improvements.	Not in our sources	Partly Note Real-time analytics and central reporting; the Assessment Toolkit is priced separately, from £4,536 a year.	Matches Note Crisis Sim 360 shows decision impact on a shared dashboard and references NIST and the CREW framework.	Matches Note Post-simulation reports and "regulator-ready records" are stated.	Matches Note Crisis Control ends with a Golden Report, an action roadmap and technical annexes.	Matches Note Evidence for DORA, ISO 22301, APRA CPS 230, FCA/PRA, NIST CSF, UK Operational Resilience, ISO 27001, FFIEC and OSFI E-21.	Matches Note Benchmarked evidence of readiness, with references to NIS2 and DORA.	Not in our sources	Not in our sources	Matches Note Audit-ready reports; scenarios align to NIST and ISO 27035.
Price published	Not in our sources	Not in our sources	Not in our sources	Matches Note Four licences published: Raven £11,950, Hawk £16,465, Osprey £21,000 and Eagle £25,725 a year, each for up to 40 participants per session, in GBP excluding tax.	Not in our sources	Not in our sources	Matches Note Professional plan: $250 per seat per month or $2,500 per seat per year.	Not in our sources	Not in our sources	Matches Note US list prices per seat per month on a 3-year term (May 2026): SAT Foundation $2.40 to $1.63 and SAT Advanced $3.75 to $2.79, from 25 to 1,000 seats; above 1,000 seats on quote.	Not in our sources	Partly Note Business plans are listed at $99 (Foundation) and $199 (Advanced) per month, with Enterprise on request; whether the price is per user, and the billing period, were not confirmed in our read.
Free start (free tier, trial or free material)	Not in our sources	Partly Note A free, facilitated tabletop is offered to qualifying hospitals and healthcare providers only (announced 6 October 2026).	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Matches Note The Lite business plan lists a 14-day free trial.	Not in our sources	Not in our sources	Partly Note A free Cybersecurity Awareness Month kit for October 2026: posters, four tabletop exercise documents, training videos and modules.	Not in our sources	Matches Note A free individual tier.
Sessions of an hour or less	Matches Note "Sixty minutes, your real environment, no slides."	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Matches Note Microsimulations take 3–5 minutes for one person and 30–45 minutes for a team.	Partly Note The AI Program Builder drafts tabletop exercises; session length is not stated on the pages we read.	Not in our sources	Not in our sources	Partly Note TryHackMe lists a "10 min average time" on its tabletop page; what the time covers is not explained.
Reaches the whole workforce	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Not in our sources	Partly Note Benchmarking by department, region and role, and microsimulations for individuals.	Partly Note Lab audiences include non-technical employees.	Matches Note Security awareness training and simulated phishing for the whole workforce.	Not in our sources	Not in our sources
Pricing	Not published Not published. reflexsecurity.io/pricing returned a 404 when we read it.	Not published Not published; the route in is a demo. A free, facilitated exercise is offered to qualifying healthcare providers.	Not published Not published on the homepage; the route in is a demo request.	Raven £11,950, Hawk £16,465, Osprey £21,000 and Eagle £25,725 a year, each for up to 40 participants per session, GBP excluding tax. Assessment Toolkit from £4,536 a year. Larger exercises and Conducttr Local are priced on request.	Not published Not published. The cyberbit.com/pricing address returned a 404 when we read it.	Not published Not published; the route in is a demo.	Professional: $250 per seat per month or $2,500 per seat per year. Lite, Base and Ultimate are not priced publicly; Lite lists a 14-day free trial. Crisis Control: price not published.	Not published Not published. The pricing page shows no figures.	Not published Not published.	SAT Foundation from $2.40 (25–50 seats) to $1.63 (501–1,000 seats) and SAT Advanced from $3.75 to $2.79, per seat per month, 3-year term, US MSRP as of May 2026, taxes excluded. Above 1,000 seats: quote. Add-ons such as PhishER Plus ($1.50) and Compliance Plus ($0.93) per seat per month at 101–500 seats.	Not published Not published; the route in is a discovery call.	Business: Foundation $99 per month and Advanced $199 per month; Enterprise on request. Whether these prices are per user, and the billing period, were not confirmed in our read, so check before budgeting. A free individual tier and paid individual plans are also published.
Audiences	Technical responders Legal teams Executives MSSPs running exercises for clients	Security, legal, privacy, IT and communications teams Executives and business leaders Outside partners in enterprise-wide exercises	SOC and incident response teams Teams defending IT, OT/ICS, cloud and hybrid environments	Executives and crisis teams Cross-functional response teams	SOC analysts Incident response teams Executive, legal and communications teams (add-on)	Incident response leaders Crisis communication and legal teams	SOC analysts and technical teams Incident response teams Executives (Crisis Control)	Boards and executives Crisis and risk teams Wider staff, through microsimulations	SOC analysts and engineers Incident response teams Executives and crisis teams Non-technical employees (labs)	Every employee	Security teams Teams validating AI agents	Individual learners SOC analysts Security teams and managers

Of the selected platforms, 4 publish a price, 4 have a free start, and 6 sell a cyber range.

Which side-by-side pages are there?

Reflex Security

BreachRx

Cloud Range

Conducttr

Cyberbit

Cytactic

Hack The Box

iluminr

Immersive Labs

KnowBe4

SimSpace

SimSpace beside TryHackMe

Questions people ask

Why is Reflex Security listed first?

It is our editorial choice for plain platform lists. That is placement, not a ranking: the other platforms follow alphabetically, and the finder orders every platform, Reflex included, by fit to your answers.

Why is KnowBe4 here if it is not incident response training?

Because awareness training is the fourth type and is often bought from the same budget. KnowBe4's profile says plainly what it does and does not train.