Skip to content
Range Compare

Finder · Five questions

Training type finder: cyber range, hands-on labs or crisis simulation?

Short answer

Answer five questions and the finder weighs four training types (cyber range, hands-on lab libraries, tabletop and crisis simulation, awareness training), draws your answers on the lanes, then checks each platform's published facts against them. Every rule is written out on How the matching works. The page opens with an example team's answers; change any answer to see your own result.

01 / 05Who is being trained?

Pick the group whose gap matters most right now.

02 / 05What should they get better at?

Think about what went wrong, or nearly went wrong, last time.

03 / 05Does anyone outside the team need proof?

Auditors, the board, insurers or a regulator.

04 / 05What is the budget position?

Budget checks count double for platforms, because budget is usually a hard limit.

05 / 05How much time can people give?

Per person, realistically.

Your answers point to Tabletop and crisis simulation

Your lanes: Tabletop and crisis simulation 8 pts, Cyber range 5 pts, Hands-on lab libraries 2 pts, Awareness training 0 pts.RANGELive fireLABSSolo skillsCRISISDecisionsAWAREEvery employee5 pts2 pts8 pts0 pts
  • RANGE · Cyber range: 5 pts, picked for your answers
  • LABS · Hands-on lab libraries: 2 pts
  • CRISIS · Tabletop and crisis simulation: 8 pts, picked for your answers
  • AWARE · Awareness training: 0 pts
The lanes show what each platform's own pages describe, or how your answers weigh the four training types. They do not measure how well a product works.
  • RANGELive firepicked for your answers5 pts
  • LABSSolo skills2 pts
  • CRISISDecisionspicked for your answers8 pts
  • AWAREEvery employee0 pts

Start here

  • Tabletop and crisis simulation8 pts

    +3 incident response team · +2 both skills and decisions · +1 auditors or the board · +2 an hour or two per exercise

Also relevant

  • Cyber range5 pts

    +2 incident response team · +2 both skills and decisions · +1 auditors or the board

Lower on your list or not suggested

  • Filled target: the platform sells this training type on the pages we read
  • Hatched target: sold with a condition (an add-on, an adjacent product, or part of the type)
  • Dashed target: not in our sources (it may exist; we did not find it)
  • Green markers: how far each training type moved up the lane on your answers

Platforms whose published facts match

Ordered by how much of your picked training each platform sells and how many of your checks its own pages satisfy. Equal fits are listed alphabetically. This is a fit to your answers, not a quality ranking.

  • Immersive Labs lanes: sells 4 of 4 training types, 1 with a condition.RANGELABSCRISISAWAREImmersive LabsSells 2 of 2 picked training types, 0 with a conditionMatches 4 checks fully, 1 partly, 0 not in our sources
    • CRISISSoldCrisis Sim for executives, incident leaders and cross-functional teams, with dynamic injects, AI actors and AI scenario creation.

      Source: Immersive Labs: Crisis Sim · Read 27 Sep 2026

    • RANGESoldDynamic Threat Range runs live-fire attacks on the customer's own stack, with tools such as Microsoft Sentinel, Elastic, Splunk and CrowdStrike.

      Source: Immersive Labs: cybersecurity technical exercises · Read 27 Sep 2026

    • Hands-on keyboard workMatchesBrowser labs against live systems, and a live-fire range.

      Source: Immersive Labs: labs · Read 27 Sep 2026

    • Executives and non-technical roles take partMatchesCrisis Sim targets executives, incident leaders and cross-functional teams; digital tabletops list audiences including the board.

      Source: Immersive Labs: Crisis Sim · Read 27 Sep 2026

    • Built around your own environment or toolsMatchesDynamic Threat Range: a live-fire attack on your own stack.

      Source: Immersive Labs: cybersecurity technical exercises · Read 27 Sep 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesBenchmarked evidence of readiness, with references to NIS2 and DORA.

      Source: Immersive Labs: cybersecurity technical exercises · Read 27 Sep 2026

    • Sessions of an hour or lessPartlyThe AI Program Builder drafts tabletop exercises; session length is not stated on the pages we read.

      Source: Immersive Labs: digital tabletop exercises · Read 27 Sep 2026

  • Reflex Security lanes: sells 1 of 4 training types; not in our sources for 3.RANGELABSCRISISAWAREReflex SecuritySells 1 of 2 picked training types, 0 with a conditionMatches 4 checks fully, 1 partly, 0 not in our sources
    • CRISISSoldBuilds the scenario from the organisation's public footprint, can enrich it with telemetry, and runs an unscripted adversary that reacts to each decision.

      Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026

    • RANGENot in our sourcesNot described on the pages we read.
    • Hands-on keyboard workPartlyTechnical players can run plain-English queries against simulated logs, endpoint telemetry and network traffic in an Investigation Console; there is no lab library or range.

      Source: Reflex Security blog index · Read 11 Oct 2026

    • Executives and non-technical roles take partMatchesBuilt for technical, legal and executive teams; AI agents fill absent seats, including the CEO.

      Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026

    • Built around your own environment or toolsMatchesReflex states it builds the crisis from your real environment; org context listed as AWS, GitHub, Cloudflare and six more.

      Source: Reflex Security homepage · Read 27 Sep 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesAn after-action report in which every finding traces to the moment it came from; reports map to SOC 2, ISO 27001 and DORA.

      Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026

    • Sessions of an hour or lessMatches"Sixty minutes, your real environment, no slides."

      Source: Reflex Security homepage · Read 27 Sep 2026

Equal fit
  • Hack The Box lanes: sells 3 of 4 training types, 1 with a condition; not in our sources for 1.RANGELABSCRISISAWAREHack The BoxSells 2 of 2 picked training types, 1 with a conditionMatches 3 checks fully, 1 partly, 1 not in our sources
    • CRISISSoldCrisis Control runs platform-led tabletop exercises with scenario waves, injects, emails, news and social updates, and optional hands-on investigation.

      Source: Hack The Box: tabletop exercises (Crisis Control) · Read 27 Sep 2026

    • RANGESold with a conditionHTB PRO, an individual plan announced in September 2026, lists SOC Range access from Q4 2026; a team range on your own tools is not described on the pages we read.

      Source: Hack The Box blog: HTB PRO plan announcement · Read 27 Sep 2026

    • Hands-on keyboard workMatchesAcademy modules and Professional Labs, plus optional hands-on investigation inside Crisis Control.

      Source: Hack The Box for business · Read 27 Sep 2026

    • Executives and non-technical roles take partMatchesCrisis Control covers executives, SOC, IT, legal and communications.

      Source: Hack The Box: tabletop exercises (Crisis Control) · Read 27 Sep 2026

    • Built around your own environment or toolsPartlySix documented baseline scenarios, tailored on request.

      Source: Hack The Box: tabletop exercises (Crisis Control) · Read 27 Sep 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesCrisis Control ends with a Golden Report, an action roadmap and technical annexes.

      Source: Hack The Box: tabletop exercises (Crisis Control) · Read 27 Sep 2026

    • Sessions of an hour or lessNot in our sourcesNot in our sources.
  • TryHackMe lanes: sells 3 of 4 training types, 1 with a condition; not in our sources for 1.RANGELABSCRISISAWARETryHackMeSells 2 of 2 picked training types, 1 with a conditionMatches 2 checks fully, 3 partly, 0 not in our sources
    • CRISISSoldTabletop exercises generated from industry, attack vector and tech stack, with playbook upload and Co-Create.

      Source: TryHackMe: tabletop exercises · Read 27 Sep 2026

    • RANGESold with a conditionSOC Simulator, Threat Hunting Simulator and Live Breach Exercises are listed for business teams; a range on your own tools is not described on the pages we read.

      Source: TryHackMe for business · Read 27 Sep 2026

    • Hands-on keyboard workMatches800+ labs and simulators.

      Source: TryHackMe for business · Read 27 Sep 2026

    • Executives and non-technical roles take partPartlyTabletop exercises are aimed at managers, practitioners and security leaders.

      Source: TryHackMe: tabletop exercises · Read 27 Sep 2026

    • Built around your own environment or toolsPartlyScenarios are generated from your industry, attack vector and tech stack, and teams can upload their own playbooks.

      Source: TryHackMe: tabletop exercises · Read 27 Sep 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesAudit-ready reports; scenarios align to NIST and ISO 27035.

      Source: TryHackMe: tabletop exercises · Read 27 Sep 2026

    • Sessions of an hour or lessPartlyTryHackMe lists a "10 min average time" on its tabletop page; what the time covers is not explained.

      Source: TryHackMe: tabletop exercises · Read 27 Sep 2026

Equal fit
  • Cyberbit lanes: sells 3 of 4 training types, 1 with a condition; not in our sources for 1.RANGELABSCRISISAWARECyberbitSells 2 of 2 picked training types, 1 with a conditionMatches 2 checks fully, 2 partly, 1 not in our sources
    • CRISISSold with a conditionCrisis Sim 360 brings executive, legal, communications, risk and SOC teams into one exercise, but is only offered as an add-on to a Cyberbit Readiness plan.

      Source: Cyberbit: Crisis Sim 360 · Read 27 Sep 2026

    • RANGESoldCyberbit Readiness is a cloud-based cyber range with 100+ team exercises.

      Source: Cyberbit homepage · Read 27 Sep 2026

    • Hands-on keyboard workMatches100+ team exercises and 2,800+ solo labs on a cloud range.

      Source: Cyberbit homepage · Read 27 Sep 2026

    • Executives and non-technical roles take partPartlyCrisis Sim 360 includes executive, legal, communications and risk teams, sold only as an add-on.

      Source: Cyberbit: Crisis Sim 360 · Read 27 Sep 2026

    • Built around your own environment or toolsPartlyExercises use commercial tools from CrowdStrike, Splunk, Palo Alto Networks, Fortinet and Microsoft; building them from your own environment is not described.

      Source: RangeForce homepage · Read 27 Sep 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesCrisis Sim 360 shows decision impact on a shared dashboard and references NIST and the CREW framework.

      Source: Cyberbit: Crisis Sim 360 · Read 27 Sep 2026

    • Sessions of an hour or lessNot in our sourcesNot in our sources.
  • iluminr lanes: sells 2 of 4 training types, 1 with a condition; not in our sources for 2.RANGELABSCRISISAWAREiluminrSells 1 of 2 picked training types, 0 with a conditionMatches 3 checks fully, 1 partly, 1 not in our sources
    • CRISISSoldMicrosimulations (3–5 minutes for one person, 30–45 minutes for a team), tabletop exercises and incident response management.

      Source: iluminr homepage · Read 27 Sep 2026

    • RANGENot in our sourcesNot described on the pages we read.
    • Hands-on keyboard workNot in our sourcesNot in our sources.
    • Executives and non-technical roles take partMatchesBoard-ready dashboards and exercises for executives and crisis teams.

      Source: iluminr homepage · Read 27 Sep 2026

    • Built around your own environment or toolsPartlyAn AI Context Engine uses business continuity and GRC data during scenarios (August 2026 update).

      Source: iluminr blog: scenario testing to continuous capability intelligence · Read 27 Sep 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesEvidence for DORA, ISO 22301, APRA CPS 230, FCA/PRA, NIST CSF, UK Operational Resilience, ISO 27001, FFIEC and OSFI E-21.

      Source: iluminr homepage · Read 27 Sep 2026

    • Sessions of an hour or lessMatchesMicrosimulations take 3–5 minutes for one person and 30–45 minutes for a team.

      Source: iluminr homepage · Read 27 Sep 2026

  • Cloud Range lanes: sells 3 of 4 training types, 1 with a condition; not in our sources for 1.RANGELABSCRISISAWARECloud RangeSells 2 of 2 picked training types, 1 with a conditionMatches 2 checks fully, 1 partly, 2 not in our sources
    • CRISISSold with a conditionSimulation-supported tabletop exercises are listed; their format and participants are not described on the homepage.

      Source: Cloud Range homepage · Read 11 Oct 2026

    • RANGESoldLive-fire attack simulations across IT, OT/ICS, cloud and hybrid environments, on a customised replica of your network with licensed versions of real SOC tools.

      Source: Cloud Range homepage · Read 11 Oct 2026

    • Hands-on keyboard workMatchesLive-fire attack simulations and 1,500+ hands-on labs and team exercises.

      Source: Cloud Range homepage · Read 11 Oct 2026

    • Executives and non-technical roles take partPartlySimulation-supported tabletop exercises are listed; who takes part is not described.

      Source: Cloud Range homepage · Read 11 Oct 2026

    • Built around your own environment or toolsMatchesA customised replica of your network with licensed versions of real SOC tools.

      Source: Cloud Range homepage · Read 11 Oct 2026

    • Reports or evidence for auditors, boards or regulatorsNot in our sourcesNot in our sources.
    • Sessions of an hour or lessNot in our sourcesNot in our sources.
  • BreachRx lanes: sells 1 of 4 training types; not in our sources for 3.RANGELABSCRISISAWAREBreachRxSells 1 of 2 picked training types, 0 with a conditionMatches 2 checks fully, 1 partly, 2 not in our sources
    • CRISISSoldAI Tabletops designs, runs and documents cyber incident simulations inside the Rex Platform, for executives or a single team, from scenario design to after-action report.

      Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026

    • RANGENot in our sourcesNot described on the pages we read.
    • Hands-on keyboard workNot in our sourcesNot in our sources.
    • Executives and non-technical roles take partMatchesEnterprise-wide exercises bring security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners together.

      Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026

    • Built around your own environment or toolsPartlyThe Exercise Agent builds scenarios around the organisation's business units and dependencies and tests its own response playbooks; a scenario built from its live environment or telemetry is not described.

      Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesAfter-action reports, executive summaries, gap analyses and prioritised improvements.

      Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026

    • Sessions of an hour or lessNot in our sourcesNot in our sources.
  • Cytactic lanes: sells 1 of 4 training types; not in our sources for 3.RANGELABSCRISISAWARECytacticSells 1 of 2 picked training types, 0 with a conditionMatches 1 checks fully, 2 partly, 2 not in our sources
    • CRISISSold"Risk-tuned, Realistic Crisis Simulation (Digital TTX)", with a Simulation Generator: five ready-made simulations plus an AI engine that builds new ones.

      Source: Cytactic blog: the next generation of cyber tabletops · Read 13 Oct 2026

    • RANGENot in our sourcesNot described on the pages we read.
    • Hands-on keyboard workNot in our sourcesNot in our sources.
    • Executives and non-technical roles take partPartlyGenerated exercises include stakeholder discussions, with crisis communication and legal disclosure agents in the platform; an exercise format for executives or the board is not described.

      Source: Cytactic: platform · Read 13 Oct 2026

    • Built around your own environment or toolsPartlyScenarios are built from the organisation's profile and data.

      Source: Cytactic blog: the next generation of cyber tabletops · Read 13 Oct 2026

    • Reports or evidence for auditors, boards or regulatorsMatchesPost-simulation reports and "regulator-ready records" are stated.

      Source: Cytactic: platform · Read 13 Oct 2026

    • Sessions of an hour or lessNot in our sourcesNot in our sources.
Equal fit
  • Conducttr lanes: sells 1 of 4 training types; not in our sources for 3.RANGELABSCRISISAWAREConducttrSells 1 of 2 picked training types, 0 with a conditionMatches 1 checks fully, 1 partly, 3 not in our sources
    • CRISISSoldVirtual Desktop, Scenario Editor and Conducttr Worlds; exercises run virtual, in person or hybrid, from one team to 1,000+ simultaneous teams.

      Source: Conducttr homepage · Read 27 Sep 2026

    • RANGENot in our sourcesNot described on the pages we read.
    • Hands-on keyboard workNot in our sourcesNot in our sources.
    • Executives and non-technical roles take partMatchesBuilt for crisis teams, with role-specific content for the players and exercises in person, online or hybrid.

      Source: Conducttr homepage · Read 27 Sep 2026

    • Built around your own environment or toolsNot in our sourcesNot in our sources.
    • Reports or evidence for auditors, boards or regulatorsPartlyReal-time analytics and central reporting; the Assessment Toolkit is priced separately, from £4,536 a year.

      Source: Conducttr pricing · Read 27 Sep 2026

    • Sessions of an hour or lessNot in our sourcesNot in our sources.
  • SimSpace lanes: sells 1 of 4 training types; not in our sources for 3.RANGELABSCRISISAWARESimSpaceSells 1 of 2 picked training types, 0 with a conditionMatches 1 checks fully, 1 partly, 3 not in our sources
    • CRISISNot in our sourcesNot described on the pages we read.
    • RANGESold"Bring your team, your tools, or your AI agents. We'll build the environment, run the attack, and show you the results."

      Source: SimSpace homepage · Read 11 Oct 2026

    • Hands-on keyboard workPartlyTeams work in an environment SimSpace builds and attacks; lab content is not described on the homepage.

      Source: SimSpace homepage · Read 11 Oct 2026

    • Executives and non-technical roles take partNot in our sourcesNot in our sources.
    • Built around your own environment or toolsMatchesTeams can bring their own tools into the environment SimSpace builds.

      Source: SimSpace homepage · Read 11 Oct 2026

    • Reports or evidence for auditors, boards or regulatorsNot in our sourcesNot in our sources.
    • Sessions of an hour or lessNot in our sourcesNot in our sources.

Sell other training types

  • KnowBe4 lanes: sells 1 of 4 training types; not in our sources for 3.RANGELABSCRISISAWAREKnowBe4Sells awareness training.

The rules above treat every platform the same way and are published on How the matching works.

How does the finder decide?

Two steps. First, each answer adds points to the training types it makes more relevant; the highest becomes your starting type and the green markers show the balance. Second, each platform that sells at least one picked type gets points for selling it and for matching your constraints, with budget checks counted double. The full rule table is on How the matching works. A platform marked Not in our sources may still offer something; we did not find it on the pages we read, so ask the vendor.

Questions people ask

Why does the finder send executives to crisis simulation?

Because executives in an incident make decisions, approve communications and accept risk; they do not run tools. Crisis simulation and tabletop exercises are the training type built for that. If your executives also need to understand the technical side, pick Both for the second question.

Why are some platforms shown as an equal fit?

Their published facts satisfy your picked types and checks to the same degree. We list equal fits alphabetically rather than invent a tiebreak.

What does Not in our sources mean?

We did not find that capability or fact on the vendor pages we read on 27 September or 11 October 2026. It may exist; it counts zero in the finder, and the platform profiles say so.

Does the finder store my answers?

No. Answers live in the page's address bar so you can share a result. Nothing is sent anywhere.