Labshock Releases Firegate: An Operable 6 kV Substation for DNP3 and IEC 104 Security Testing
The new zone lets security teams send a real control command through a substation and then verify whether their detection stack saw it.

July 16, 2026 — Labshock has released Firegate, a new zone in World of Labshock built around an operable 6 kV substation running DNP3 and IEC 60870-5-104 — the two protocols used to control power, water and infrastructure networks.
The environment contains RTUs, SCADA, feeders, breakers, disconnectors and industrial routing, with network detection watching the traffic between them. Unlike a packet capture or a protocol reference, every element is live: commands execute, breakers change state, and telemetry returns.
The zone is organised around a single control chain that can be followed end to end. SCADA sends a command, the RTU processes it, the breaker changes state, telemetry returns, the IDS observes the traffic, and the operator sees the process impact. Each transition is a distinct security question, and the gap between them is where most substation monitoring fails.
Security teams can capture live protocol sessions, read protocol fields, map addresses and points, operate approved commands through the Select-Before-Operate sequence, test what happens when communication degrades, and validate whether detection fires against genuine activity rather than a replayed capture.
Firegate ships as part of patch 2.3.1 and is available to Pro and Organization users.
Media enquiries: info@labshocksecurity.com
