NODE-01 / ADL/// CYBER RANGE · LIVE-FIRE ORCHESTRATION
The cyber range for defence, space, and critical infrastructure.
Apex unifies three capabilities — structured training & labs, a live CTF competition engine, and on-demand operational simulation against digital twins of mission-critical systems — into a single orchestration platform. Built in Adelaide. Deployed by operators who take cyber seriously.
Three scenario categories. One orchestration fabric.
TRN · CTF · OPSSIM
§ 01TRN// TRAINING & LABS
Structured cyber curriculum. Cohort-scale.
A full LMS for multi-section courses, quizzes, question banks, badges, and learning paths. Content built by CyberOps — shipped, not generic.
CATALOG · TRN.LIVE04 MODULES · ACTIVE
TRN-01
Annual Cyber Awareness
6 lessons · quiz · badge
COURSE
TRN-02
Interactive Phishing Training
live inbox · lure library
SIM
TRN-03
Social Engineering Training
pretext drills · scoring
COURSE
TRN-04
TheAftermath — Windows DFIR Triage
triage · memory · timeline
LAB
REPLACESMoodle · Canvas · bespoke LMS
§ 02CTF// CAPTURE THE FLAG
CVE Blitz. Live-fire skirmish.
Real CVEs. Real patches. Real time pressure. Teams exploit, detect, and remediate against provisioned infrastructure — scored live. Static, dynamic, and scenario-mode challenges.
EVENT · CVE-BLITZ-24Q2● T-48:12:07
01
TEAM·BRAVO⚑ CVE PWNED
last · CVE-2024-31497
4,250+250
02
TEAM·ECHO
last · CVE-2023-50164
4,120+120
03
TEAM·KILO
last · CVE-2024-6387
3,890+50
04
TEAM·ZULU
3,620—
05
TEAM·LIMA
3,410—
CHAL · 14 OPENDYN · STATIC · SCENARIO
REPLACESCTFd · custom scoreboards
§ 03OPSSIM// OPERATIONAL SIMULATION
THE CROWN JEWEL
Digital twins. Real infrastructure. On demand.
CloudFormation templates provision live AWS stacks — mirror builds of ground stations, RF spectrum sources, launch consoles, LMSes, ERPs, and critical-infrastructure estates across electricity, gas, water, and government. Participants SSH and RDP into actual machines with injected vulnerabilities and benign malware signatures. Score comes from live telemetry, not a quiz form.
Define lessons, flags, or a CloudFormation-backed digital twin. Version it. Tag it by skill and classification.
scenario.yaml
02
SCHEDULE
Schedule an event
Assemble a cohort. Pick scenarios. Gate by role — admin, event_admin, participant. Set a window. Arm.
event.scheduled
03
ENGAGE
Participants engage
Browsers for LMS and CTF. SSH and RDP into real provisioned hosts for OpsSim. No local tooling required.
stack.provisioned
04
SCORE
Score from live telemetry
Flag submissions, lesson progress, and host telemetry stream into a unified score model and skill radar.
telemetry.stream
apex · orchestrator
node-01 · adl
▊
STREAM · KINESIS·HEALTHYingest · 1.4 MB/s
§ 03 / DEPLOYED WITH
Mission profiles, not logo soup.
OPERATORS · 04 CATEGORIES
DEFENCEPROFILE · ADF-01
◆ ◆ ◆
Train cyber operators to hold position under a sustained intrusion.
A 72-hour live-fire exercise against a mirrored command network. Red cell exercises active lateral movement. Blue cell contains, evicts, and restores — scored on time-to-detect, time-to-contain, and integrity of forensic record.
ADFallied militariesdefence primes
SPACEPROFILE · GND-07
◆ ◆ ◆
Detect an insider exfiltrating telemetry from a ground station.
A digital twin of a ground station console with injected anomalous uplink behaviour. Crew identifies the vector, isolates the host, and reconstructs the timeline — without pausing the simulated pass.
ground station crewsmission controlsatellite ops
ENTERPRISEPROFILE · CI-14
◆ ◆ ◆
Run compliance training and a live exercise on the same estate.
Phishing awareness and DFIR fundamentals push through Apex LMS to 3,200 staff. A parallel red-vs-blue exercise runs on a digital twin of the SCADA-adjacent corporate estate. Single pane of glass.
bankingenergycritical infrastructure
GOVERNMENTPROFILE · GOV-22
◆ ◆ ◆
Stand up an internal CTF across twelve agency teams.
Scenario-mode challenges provision dedicated infrastructure per team. Dynamic flags prevent lateral share. Leaderboard is live. Skill radar rolls up to agency cyber workforce reporting.
government cyber teamsSOCsworkforce uplift
§ 04 / PLATFORM
Engineered, not marketed.
04 SUBSYSTEMS · 16 CAPABILITIES
01IDENTITY & ACCESS
— ROLE MODEL
admin · event_admin · participant
— ORG SCOPE
tenant-isolated events and content
— SSO
SAML 2.0 · OIDC · mTLS to participant hosts
— AUDIT
immutable event log · export
02INFRASTRUCTURE
— PROVISIONING
AWS CloudFormation · parameterised stacks
— LABS
Docker-orchestrated · per-user isolation
— NETWORKS
VPC-per-event · segmented by scenario
— REGIONS
AU · US · EU · sovereign on request
03ENGAGEMENT
— LMS
courses · quizzes · banks · badges · paths
— CTF ENGINE
static · dynamic · scenario · team
— OPSSIM
SSH / RDP / web consoles into real hosts
— SCHEDULING
windowed events · cohort gating
04TELEMETRY & SCORING
— STREAMS
Kinesis ingest · per-event isolation
— SIGNALS
flag submit · host events · lesson state
— SKILL RADAR
per-participant capability profile
— EXPORT
reports · CSV · API · webhook
IRAP-ready
pathway assessed
Essential 8
aligned
ISM controls
mapped
Data residency
AU-1 default
Air-gapped
on request
Source review
under NDA
§ 05 / OPERATORS
About CyberOps Pty Ltd
ADELAIDE · SA · AU
Apex productises a decade of bespoke work for defence, space, and critical infrastructure customers.
CyberOps is an Adelaide-based Defence, Space & Cyber consultancy. We have built bespoke digital twins, incident response playbooks, and red-team engagements for operators who need cyber to behave the way their mission does — quietly, reliably, and under pressure. Apex is how that work ships.
HQ
Adelaide · SA
DOMAIN
Defence · Space · Cyber
PRACTICE
Consulting · Engineering · Training
◆ ACCESS MODEL
No self-serve sign-up. Access is granted.
Apex is not a freemium platform. Onboarding is a qualification conversation, followed by a scoped trial event.