APEX // CYBER RANGE // CONTROLLED RELEASE — ACCESS BY INVITATION
APEX
CYBEROPS · ADL · AU
SYS · NOMINAL|2026-04-23 00:00:00Z
Request access
NODE-01 / ADL/// CYBER RANGE · LIVE-FIRE ORCHESTRATION

The cyber range for defence, space, and critical infrastructure.

Apex unifies three capabilities — structured training & labs, a live CTF competition engine, and on-demand operational simulation against digital twins of mission-critical systems — into a single orchestration platform. Built in Adelaide. Deployed by operators who take cyber seriously.

03
Scenario categories
training · ctf · opssim
AWS
Provisioning backbone
cloudformation · docker
72h
Max exercise duration
continuous telemetry
RBAC
Access model
admin · event_admin · participant
NODE-01/ADL·nominal
OPS-01 · SPECTRANET-GND/ap-southeast-2·provisioning
CTF · CVE-BLITZ-24Q2/team·12·in progress · 48:12:07
TRN-01 · ANNUAL CYBER AWARENESS/cohort·86·active
OPS-03 · LIVE-FIRE WAR GAME/red vs blue·armed
TELEMETRY/ingest·1.4MB/s
OPS-05 · ELEC-GAS CI/stack·cfn·healthy
OPS-04 · INCIDENT RESPONSE/mirror·synced · +0ms
NODE-01/ADL·nominal
OPS-01 · SPECTRANET-GND/ap-southeast-2·provisioning
CTF · CVE-BLITZ-24Q2/team·12·in progress · 48:12:07
TRN-01 · ANNUAL CYBER AWARENESS/cohort·86·active
OPS-03 · LIVE-FIRE WAR GAME/red vs blue·armed
TELEMETRY/ingest·1.4MB/s
OPS-05 · ELEC-GAS CI/stack·cfn·healthy
OPS-04 · INCIDENT RESPONSE/mirror·synced · +0ms
§ 01 / SCENARIOS
Three scenario categories. One orchestration fabric.
TRN · CTF · OPSSIM
§ 01TRN// TRAINING & LABS

Structured cyber curriculum. Cohort-scale.

A full LMS for multi-section courses, quizzes, question banks, badges, and learning paths. Content built by CyberOps — shipped, not generic.

CATALOG · TRN.LIVE04 MODULES · ACTIVE
TRN-01
Annual Cyber Awareness
6 lessons · quiz · badge
COURSE
TRN-02
Interactive Phishing Training
live inbox · lure library
SIM
TRN-03
Social Engineering Training
pretext drills · scoring
COURSE
TRN-04
TheAftermath — Windows DFIR Triage
triage · memory · timeline
LAB
REPLACESMoodle · Canvas · bespoke LMS
§ 02CTF// CAPTURE THE FLAG

CVE Blitz. Live-fire skirmish.

Real CVEs. Real patches. Real time pressure. Teams exploit, detect, and remediate against provisioned infrastructure — scored live. Static, dynamic, and scenario-mode challenges.

EVENT · CVE-BLITZ-24Q2 T-48:12:07
01
TEAM·BRAVO⚑ CVE PWNED
last · CVE-2024-31497
4,250+250
02
TEAM·ECHO
last · CVE-2023-50164
4,120+120
03
TEAM·KILO
last · CVE-2024-6387
3,890+50
04
TEAM·ZULU
3,620
05
TEAM·LIMA
3,410
CHAL · 14 OPENDYN · STATIC · SCENARIO
REPLACESCTFd · custom scoreboards
§ 03OPSSIM// OPERATIONAL SIMULATION
THE CROWN JEWEL

Digital twins. Real infrastructure. On demand.

CloudFormation templates provision live AWS stacks — mirror builds of ground stations, RF spectrum sources, launch consoles, LMSes, ERPs, and critical-infrastructure estates across electricity, gas, water, and government. Participants SSH and RDP into actual machines with injected vulnerabilities and benign malware signatures. Score comes from live telemetry, not a quiz form.

spectranet-gnd.cfn.yamlCREATE_COMPLETE
# scenario: OPS-01 · SpectraNet Ground Station
AWSTemplateFormatVersion: '2010-09-09'
Description: Apex · SpectraNet · twin
Resources:
  OpsConsole:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t3.large
      UserData: !Sub inject/satctrl/v3.sh
  RFIngest:
    Type: AWS::Kinesis::Stream
  VulnSignature:
    CVE: 2024-31497 # benign marker
TOPOLOGY · SPECTRANET-GND9 nodes · 12 edges
OPS-01CFN · LIVE
SpectraNet Ground Station
satcom · RF ingest · ops console
OPS-02CFN · LIVE
RF Simulator
hardware-in-the-loop · spectrum
OPS-03CFN · LIVE
Live-fire Cyber War Game
red vs blue · 72h · multi-estate
OPS-04CFN · LIVE
Incident Response
tabletop · live hosts · scored
OPS-05CFN · LIVE
Electricity & Gas — CI Disaster
SCADA-shaped · sector drill
OPS-06CFN · LIVE
Water Supply — CI Disaster
SCADA-shaped · telemetry
OPS-07CFN · LIVE
SA Government — CI Disaster
multi-agency · sovereign
OPS-08CFN · LIVE
Academia — CI Disaster
LMS · SIS · research twin
§ 02 / OPERATIONS
From author to score. Four beats.
ORCHESTRATION · LIVE
01
AUTHOR

Author scenarios

Define lessons, flags, or a CloudFormation-backed digital twin. Version it. Tag it by skill and classification.

scenario.yaml
02
SCHEDULE

Schedule an event

Assemble a cohort. Pick scenarios. Gate by role — admin, event_admin, participant. Set a window. Arm.

event.scheduled
03
ENGAGE

Participants engage

Browsers for LMS and CTF. SSH and RDP into real provisioned hosts for OpsSim. No local tooling required.

stack.provisioned
04
SCORE

Score from live telemetry

Flag submissions, lesson progress, and host telemetry stream into a unified score model and skill radar.

telemetry.stream
apex · orchestrator
node-01 · adl
STREAM · KINESIS·HEALTHYingest · 1.4 MB/s
§ 03 / DEPLOYED WITH
Mission profiles, not logo soup.
OPERATORS · 04 CATEGORIES
DEFENCEPROFILE · ADF-01
◆ ◆ ◆

Train cyber operators to hold position under a sustained intrusion.

A 72-hour live-fire exercise against a mirrored command network. Red cell exercises active lateral movement. Blue cell contains, evicts, and restores — scored on time-to-detect, time-to-contain, and integrity of forensic record.

ADFallied militariesdefence primes
SPACEPROFILE · GND-07
◆ ◆ ◆

Detect an insider exfiltrating telemetry from a ground station.

A digital twin of a ground station console with injected anomalous uplink behaviour. Crew identifies the vector, isolates the host, and reconstructs the timeline — without pausing the simulated pass.

ground station crewsmission controlsatellite ops
ENTERPRISEPROFILE · CI-14
◆ ◆ ◆

Run compliance training and a live exercise on the same estate.

Phishing awareness and DFIR fundamentals push through Apex LMS to 3,200 staff. A parallel red-vs-blue exercise runs on a digital twin of the SCADA-adjacent corporate estate. Single pane of glass.

bankingenergycritical infrastructure
GOVERNMENTPROFILE · GOV-22
◆ ◆ ◆

Stand up an internal CTF across twelve agency teams.

Scenario-mode challenges provision dedicated infrastructure per team. Dynamic flags prevent lateral share. Leaderboard is live. Skill radar rolls up to agency cyber workforce reporting.

government cyber teamsSOCsworkforce uplift
§ 04 / PLATFORM
Engineered, not marketed.
04 SUBSYSTEMS · 16 CAPABILITIES
01IDENTITY & ACCESS
ROLE MODEL
admin · event_admin · participant
ORG SCOPE
tenant-isolated events and content
SSO
SAML 2.0 · OIDC · mTLS to participant hosts
AUDIT
immutable event log · export
02INFRASTRUCTURE
PROVISIONING
AWS CloudFormation · parameterised stacks
LABS
Docker-orchestrated · per-user isolation
NETWORKS
VPC-per-event · segmented by scenario
REGIONS
AU · US · EU · sovereign on request
03ENGAGEMENT
LMS
courses · quizzes · banks · badges · paths
CTF ENGINE
static · dynamic · scenario · team
OPSSIM
SSH / RDP / web consoles into real hosts
SCHEDULING
windowed events · cohort gating
04TELEMETRY & SCORING
STREAMS
Kinesis ingest · per-event isolation
SIGNALS
flag submit · host events · lesson state
SKILL RADAR
per-participant capability profile
EXPORT
reports · CSV · API · webhook
IRAP-ready
pathway assessed
Essential 8
aligned
ISM controls
mapped
Data residency
AU-1 default
Air-gapped
on request
Source review
under NDA
§ 05 / OPERATORS
About CyberOps Pty Ltd
ADELAIDE · SA · AU

Apex productises a decade of bespoke work for defence, space, and critical infrastructure customers.

CyberOps is an Adelaide-based Defence, Space & Cyber consultancy. We have built bespoke digital twins, incident response playbooks, and red-team engagements for operators who need cyber to behave the way their mission does — quietly, reliably, and under pressure. Apex is how that work ships.

HQ
Adelaide · SA
DOMAIN
Defence · Space · Cyber
PRACTICE
Consulting · Engineering · Training
◆ ACCESS MODEL

No self-serve sign-up. Access is granted.

Apex is not a freemium platform. Onboarding is a qualification conversation, followed by a scoped trial event.

Request access