Security Labs
Stop reading about controls and start operating them. 9 free, in-browser labs that put you in the seat — write the rules, tune the policy, remediate the finding, run the incident — and score you against a goal, with other players working the same scenario live.
Firewall Rule Lab
Order allow/deny rules and replay packets first-match-wins. Catch shadowed and any→any rules.
Open lab →Egress Proxy Lab
Build a web-filtering egress policy, see the TLS-inspection trade-off, and catch data exfil.
Open lab →Email Authentication Lab
Tune SPF, DKIM and DMARC and deliver messages — learn why forwarded mail survives on DKIM.
Open lab →Conditional Access Lab
Build Entra-style access policies and evaluate sign-ins. Catch legacy-auth gaps and lockouts.
Open lab →Cloud Posture Lab
Find and remediate cloud misconfigurations with a live posture score and blast-radius notes.
Open lab →Detection Lab
Write SIEM rules on a labelled log stream and tune precision and recall to beat alert fatigue.
Open lab →SOC Case Triage Lab
Triage 50 realistic security cases like an analyst — priority, team and first action, scored.
Open lab →IR Playbook Lab
Sequence an incident response across the lifecycle. Image before wipe, eradicate before restore.
Open lab →Forensics Lab
Reconstruct a breach from the artifacts, separate evidence from red herrings, and cite your proof.
Open lab →From the lab to the real queue
The triage lab drills the decision; when you want to run live cases with your team, the Case Management system tracks real cases with full history, priority and status — isolated to your workspace and retained for 30 days.
Open Case Management →Frequently asked questions
What are the PlayCISO Labs?
A set of free, in-browser hands-on security labs. Each one puts you in the operator seat — writing firewall and SIEM rules, tuning DMARC and Conditional Access, remediating cloud misconfigurations, sequencing incident response, and working a forensic case — with instant scoring against a goal. No account, no install, nothing to download.
Are the labs really free?
Yes. Every lab on this page is free to use in your browser, with no sign-up. They are teaching simulations, so they never touch a real system, network or account.
What makes them "multiplayer"?
Each lab has a live arena that simulates other participants working the same scenario — peer analysts, an adversary, teammates and a review board — on a live feed that reacts as you progress. It is a self-contained simulation inside the page, there to make the exercise feel like a live environment rather than a quiz.
Who are they for?
Analysts and engineers building hands-on skill, people preparing for a blue-team, SOC or cloud-security interview, and leaders who want to drill their team on the decisions that matter — rule order, default-deny, alert precision, response sequencing and evidence-based investigation.