WORLD OF LABSHOCK
#1 Industrial Lab for hands-on OT security training and testing
A real-world industrial cybersecurity environment for PLC/SCADA, industrial protocols and IDS/SIEM tools. Built for hands-on OT security learning, pentesting, security validation and building labs in controlled environments.
Learn how OT works. Test its security. Validate your own controls against it. Build the environments you need.
Labshock — Problem Space
Critical Gaps
in OT Security
Industrial control systems and OT environments lack safe, unified platforms for training, threat simulation, and security testing — creating critical gaps in defense validation and real-world readiness.
No hands-on OT learning environments
OT cybersecurity is mostly theoretical — there is no safe, realistic environment with PLCs, SCADA, and industrial protocols to actually learn by operating real systems.
No safe OT security testing environments
Security teams lack isolated OT environments to test PLCs, SCADA systems, and industrial networks under realistic threat conditions without risking production systems.
No IDS & SIEM validation with real OT traffic
Detection systems cannot be properly validated because OT traffic, industrial protocols, and security testing activity are missing or heavily simulated.
No reproducible OT lab building capability
Industrial environments are fragmented and difficult to deploy, making it impossible to build consistent, repeatable OT security labs for training or testing.
4 problems — no learning, no testing, no validation, no labs
Industrial cybersecurity gaps in OT environments include lack of SCADA testing environments, limited ICS penetration testing capabilities, and fragmented security validation tools across industrial systems.
Real Feedback from OT Cybersecurity Professionals
Feedback from cybersecurity professionals, engineers, and researchers using Labshock for OT security training, industrial system testing, and ICS environment simulation.
Alexandre Olivio
"Labshock truly provides a clear and realistic view of how OT environments work. It makes it easy to access tools and commands in order to test different ways of accessing the settings and instruments of the OT environment. It has surprised me and I recommend using the environment for studies and presentations."
Lars Elgaard
"The Labshock really sets a clear view into how OT environments work. It is very easy to get into the tools and commands to test different ways to access OT environment settings and instruments. The pluck&play installation make it easy to get started."
Debon Grady
"The setup is simple and well documented. You don't need to know a whole lot to get started, and the support is extremely prompt."
Dr. Sulaiman A | Founder & Speaker
"Labshock has been a game-changer for me. I've used it both as an instructor and as a researcher for my own practice. It's not just a tool, it's a collaborative space."
Fouad S | Automation Engineer
"The best ever 🔥💪"
Richard P | Security Professional
"Excellent OT SIEM learning tool."
Imam A | Automation Manager
"The best tool I have used to learn and gain practical experience. Best part is Zakhar Bernhardt teaches himself. Hatts off."
Lawrence N | Cyber Security Architect
"Zakhar Bernhardt thanks for creating Labshock and making it available on Github. Anyone with knowledge on docker can spin it up with the detailed instructions provided, and there are youtube videos for guidance as well!"
Jose S | OT Cybersecurity Specialist
"From the first day you launched the project, I implemented it in my lab. Congratulations on the great work you have done and how you are improving it."
Alexandre Olivio
"Labshock truly provides a clear and realistic view of how OT environments work. It makes it easy to access tools and commands in order to test different ways of accessing the settings and instruments of the OT environment. It has surprised me and I recommend using the environment for studies and presentations."
Lars Elgaard
"The Labshock really sets a clear view into how OT environments work. It is very easy to get into the tools and commands to test different ways to access OT environment settings and instruments. The pluck&play installation make it easy to get started."
Debon Grady
"The setup is simple and well documented. You don't need to know a whole lot to get started, and the support is extremely prompt."
Dr. Sulaiman A | Founder & Speaker
"Labshock has been a game-changer for me. I've used it both as an instructor and as a researcher for my own practice. It's not just a tool, it's a collaborative space."
Fouad S | Automation Engineer
"The best ever 🔥💪"
Richard P | Security Professional
"Excellent OT SIEM learning tool."
Imam A | Automation Manager
"The best tool I have used to learn and gain practical experience. Best part is Zakhar Bernhardt teaches himself. Hatts off."
Lawrence N | Cyber Security Architect
"Zakhar Bernhardt thanks for creating Labshock and making it available on Github. Anyone with knowledge on docker can spin it up with the detailed instructions provided, and there are youtube videos for guidance as well!"
Jose S | OT Cybersecurity Specialist
"From the first day you launched the project, I implemented it in my lab. Congratulations on the great work you have done and how you are improving it."
Labshock is used by cybersecurity professionals for OT security testing, SCADA training, PLC simulation, and industrial cybersecurity research in real-world environments.
World of Labshock — Use Cases
One Environment.
Four Directions.
A single industrial OT environment for learning, testing, validation, and lab creation — all running real protocols, real PLC logic, real traffic.
Direction 01
Learn How OT Works
Real environments. Real protocols. Real skills.
Most OT security training is theoretical. Slides and diagrams of systems you never touch. Labshock is different — you operate actual SCADA interfaces, program real PLC logic, and interact with industrial processes the way engineers and security testers do in the field.
- Hands-on OT cybersecurity training
- SCADA and PLC system understanding
- Industrial protocol fundamentals
- Structured progression through zones
Direction 02
Test Industrial Systems
Authorised OT penetration testing and team cyber range exercises. Safely isolated.
Production OT environments cannot be safely tested directly. They operate critical infrastructure and cannot tolerate disruption. Labshock provides a controlled alternative: a fully isolated industrial environment that behaves like production, built for authorised security testing.
- OT penetration testing workflows
- Cyber range exercises for a whole team
- Industrial system exposure analysis
- Controlled, authorised testing environment
Direction 03
Validate Your Own Controls
The IDS, SIEM and detection you already pay for — pointed at a live plant.
You cannot validate detection logic using synthetic logs or isolated simulations. You need real industrial behaviour: live Modbus traffic, PLC state transitions, SCADA events, and network-level visibility across OT segments.
- Industrial IDS validation
- OT SIEM correlation testing
- Detection rule verification
- Repeatable scenarios for SOC workflows
Direction 04
Build The Environments You Need
Custom industrial environments. On demand.
Every organization has a different OT architecture. A water utility looks nothing like a railroad control system. A gas terminal has different protocols, segmentation, and failure modes than a power substation. Generic labs teach generic skills. Labshock Builder lets you construct the specific infrastructure you need.
- Custom OT lab environments
- PLC and SCADA simulation systems
- Industrial network emulation
- Reproducible infrastructure you can share
4 directions — real OT environments, not simulations
Learn How OT Works
Most OT security training is theoretical. Slides and diagrams of systems you never touch. Labshock is different — you operate actual SCADA interfaces, program real PLC logic, and interact with industrial processes the way engineers and security testers do in the field.
Test Industrial Systems
Production OT environments cannot be safely tested directly. They operate critical infrastructure and cannot tolerate disruption. Labshock provides a controlled alternative: a fully isolated industrial environment that behaves like production, built for authorised security testing.
Validate Your Own Controls
You cannot validate detection logic using synthetic logs or isolated simulations. You need real industrial behaviour: live Modbus traffic, PLC state transitions, SCADA events, and network-level visibility across OT segments.
Build The Environments You Need
Every organization has a different OT architecture. A water utility looks nothing like a railroad control system. A gas terminal has different protocols, segmentation, and failure modes than a power substation. Generic labs teach generic skills. Labshock Builder lets you construct the specific infrastructure you need.
Labshock is an OT cybersecurity platform providing industrial security testing, SCADA training, IDS validation, and lab building for OT security professionals.
Trusted by OT Security Companies, Researchers, Universities, and Industrial Cybersecurity Communities
Labshock is part of the NVIDIA Inception Program, supporting innovation in industrial cybersecurity, OT security research, and AI-driven threat detection systems.
Labshock collaborates with cybersecurity companies, research communities, universities, and industrial organizations focused on OT security, ICS protection, and cybersecurity training environments.
Labs
View LabsExplore hands-on industrial cybersecurity labs designed for realistic OT environments
World of Labshock — How it runs
How It
Actually Runs.
From a laptop to a running industrial environment you can break and reset. No cloud, no shared infrastructure, no connection required once it is installed.
- 01
Install on your own machine
Docker on a laptop is enough — for every plan. An Organization license can run on your own servers too, but nothing about it requires that. Nothing of yours runs on our infrastructure.
- 02
Start an environment
Controllers, SCADA, routing and monitoring come up together on an isolated network — a working plant, not a diagram of one.
- 03
Operate the process
Write a coil, send a breaker command, change a setpoint. Real protocol traffic on the wire, from logic that is actually executing.
- 04
Watch your detection
Point an IDS at the traffic and a SIEM at the events. The alert fires on activity you caused, or it does not — and now you know.
- 05
Break it without consequence
The environment is yours and isolated, so there is nothing you are not allowed to do to it. No production system is anywhere near.
- 06
Reset, or hand it over
Back to a known state for the next run or the next student. Export it and a colleague brings up the identical environment.
6 steps — INSTALL, START, OPERATE, DETECT, BREAK, RESET
The Labshock workflow covers OT cybersecurity training, PLC and SCADA communication, industrial penetration testing, IDS monitoring, SIEM integration, and industrial pentest simulation for ICS environments.
Integrations
Search IntegrationsOT, ICS & Industrial Cybersecurity Integrations
Labshock integrates with industrial control systems, OT monitoring tools, SIEM platforms, IDS solutions, PLC environments, and industrial cybersecurity technologies for hands-on training and testing.
Labshock supports OT and ICS cybersecurity integrations including PLC systems, SCADA platforms, industrial IDS monitoring, SIEM integrations, Docker environments, industrial network analysis, and OT penetration testing tools.
Labshock — Deployment
Isolated.
On Your Own Hardware.
Labshock installs inside your network and stays there. No cloud dependency, no shared infrastructure, no industrial data leaving your perimeter — because in OT, the network that cannot reach the internet is the one worth practising on.
Runs on your hardware
The whole platform installs on machines you own, inside your own network. There is no Labshock-hosted component your labs depend on.
Air-gap capable
No outbound connection required to operate. Suitable for OT networks with no internet route, and for environments where that route is the finding.
Your data never leaves
Process data, network captures, telemetry and user activity stay on your infrastructure. Nothing is shipped elsewhere for processing or analytics.
No shared tenancy
Your environment is not co-located with anyone else's. An Organization license deploys as a dedicated installation under your control.
Your perimeter
Organization licenses deploy fully on-premise. Free and Pro run locally under Docker on your own machine.
On-premise and air-gapped OT security lab deployment
Labshock can be deployed entirely on-premise inside an isolated or air-gapped network. No industrial process data, network capture, telemetry or user activity is transmitted outside the customer environment, and no outbound internet connection is required to operate the platform. An Organization license deployments run as a dedicated single-tenant installation on customer hardware.
Community
Join Community ↗Growing OT & ICS Cybersecurity Community
Labshock is used for industrial cybersecurity training, OT testing, SCADA simulation and ICS security validation — by security teams, vendors, universities and public bodies, on their own hardware.
- GitHub Stars & Forks
- 756+
- Industrial Lab Environments
- 16
- Discord Community Members
- 1,868+
Labshock is an OT and ICS cybersecurity platform used worldwide for industrial security testing, SCADA simulations, PLC training, OT monitoring, and industrial penetration testing.
Labshock — Pricing
Flexible Pricing.
For Everyone.
Choose the Labshock plan that fits your industrial cybersecurity journey — from OT labs and SCADA simulations to enterprise-scale ICS security testing environments.
Free
Learn OT security using real industrial environments.
- Labshock Core
- Limited Labs & Guides
- Time-Restricted Access
- Main Components Available
- Only 2 Zones & 20 Level max
Pro
For individual OT security professionals. Every zone, every lab, no session limit.
- No Time Limit
- Guides & Quests
- Full Labs & Scenarios
- Tasks & Challenges (soon)
- Only Personal, no Company use
Organizations
For companies, universities & government — seats, on-premise and commercial use.
- Enterprise, Educational or Government
- Seats for your people
- Builder & Custom Labs
- Commercial Use Rights
- Priority Support & Onboarding
3 plans — free, pro & organizations
Labshock pricing plans for OT cybersecurity training and ICS security testing environments. Free and Pro for individuals. The available organization licenses are Enterprise, Educational and Government. Reselling or embedding Labshock runs under the separate Partner Program.
OT Security Lab for Industrial Cybersecurity
Labshock provides an industrial cybersecurity training and testing platform for OT environments including SCADA systems, Modbus networks, and ICS infrastructure.