Most cyber ranges teach IT incident response against IT systems. Very few represent a building: BACnet traffic, a Niagara station, cameras, access control, and the awkward reality that the “compromised device” might be controlling air handling in an occupied hospital. Defenders trained only on corporate networks meet OT for the first time during a real incident.
Status: product concept, in active development. This is something we are building, not something you can buy today. We publish our roadmap because the engineering thinking behind it is the useful part — and because we would rather show you the design than imply a finished product.
Designed Capabilities
- Virtual BAS and OT network — a building that behaves like a building.
- Niagara, BACnet and Modbus emulation — the protocols actually in scope.
- Camera and access-control systems — the parts of the estate everyone forgets.
- Attack and misconfiguration scenarios — rogue devices, unsafe commands, drifted config.
- Packet capture and log telemetry — realistic evidence to investigate.
- SOC investigation workbench — work the incident with proper tooling.
- Instructor campaign builder — multi-stage exercises rather than one-off puzzles.
- Evidence-based after-action reporting — what was found, missed, and how fast.
Where Three Practices Meet
This is the clearest example of the group working as one: SoftwarePile supplies authentic building-system behaviour, BulletproofSoft the attack scenarios and forensic realism, SoftwareSplash the simulation and training engine. Very few organisations can assemble all three, which is precisely why OT defenders are under-trained.
Tell us if this matches a problem you have — early input shapes what we build first, and we will give you an honest view of where it stands.