Security field lab
Choose a task.
Leave with a useful result.
A connected local-first workspace for learners, practitioners, trainers and security leaders. No account, live-target scanning or paid AI API.
WHAT IS ACTUALLY HERE
Every major route follows the same discipline: understand the idea, make a decision, inspect the explanation, apply it in a planner or template, then export the result. Practice progress is not certification; self-reported answers are not verified evidence.
START WITH INTENT
Learn → Test → Practise → Apply → Export
Build a path for your role and time.
Choose a role, a problem and 5, 15 or 30 minutes. The compass links explanations, practice and a useful next task.
Build a learning route 02 / self-reportedTestAsk better readiness questions.
Use one of 15 original self-checks. Unknowns stay visible; a score never becomes certification or assurance.
Choose a self-check 03 / simulationPractiseMake a decision inside a safe scenario.
Work through synthetic attack, defence and governance decisions. Nothing scans a target or executes an exploit.
Enter the Decision Arcade 04 / workbenchApplyTurn the decision into structured work.
Plan an authorized test, model threats, facilitate a tabletop or build a bounded security programme.
Open the planning tools 05 / downloadExportLeave with something useful.
Adapt 18 original working documents or export a local debrief, plan or review under your control.
Open the document studioCOMPLETE FIELD KIT
Nothing important hidden in a footer.
Assess and prioritize
Coverage-first results, explicit unknowns and known-gap actions.
Open Evidence Sufficiency LabJudge relevance, scope, freshness and what an artifact cannot prove.
Open vCISO Boardroom SimulatorAllocate a fictional budget and explain deferred-risk trade-offs.
Open Current-to-target roadmapTranslate a saved review into owners, targets and evidence needs.
OpenPractise and facilitate
Short Attack → Defend → Govern missions with debriefs.
Open Weekly Mystery CaseA deterministic synthetic investigation with local-only history.
Open Corporate tabletop facilitatorReveal timed injects, capture decisions and export an after-action record.
Open Visual Threat Model StudioMap flows, boundaries, threats, mitigations and validation tasks.
OpenPlan and produce
Define scope and checks before testing.
Open 18 working documentsCustomize and export original Markdown templates.
Open Saved-review workbenchCompare device-local snapshots and maintain known-gap actions.
Open Corporate training studioExplore audiences, outcomes, sample exercises and delivery boundaries.
OpenInspect practical work
Inspect public tools, learning resources, research and their limitations.
Open PostureKitEvidence-led Windows, identity and network posture review.
Open EvidenceGateOffline evidence-package quality checks.
Open Practical mini-lessonsShort explanations and knowledge checks.
OpenChoose a self-check.
Pick the decision you need to prepare. Results separate known gaps from unanswered questions.
Local utility bench
NO TARGET SCANNING. NO INPUT UPLOADS.Object authorization lab
Change the actor, object and policy. See why login is not permission.
Open toolJWT inspector
Decode a sample header and claims. Separate decoding from signature verification.
Open toolHTTP header inspector
Inspect pasted response headers without contacting a target.
Open toolIPv4 subnet planner
Inspect address boundaries, masks and /31 or /32 edge cases.
Open toolSHA-256 workbench
Hash text or a local file. Compare digests without uploading your input.
Open toolRisk decision canvas
Record an illustrative likelihood/impact decision and its context.
Open toolResume work on this device.
Saved reviews stay in this browser unless you export them. Do not use this as an evidence vault.