OFFENSIVE SECURITY  ·  DEFENSIVE OPERATIONS  ·  CYBER RANGES

Enter the Realm of
Modern Cyber Warfare

Air Realm is the offense–defense proving ground for the next generation of security teams — VAPT, SOC-as-a-Service, OT Security, and Research & Innovation delivered alongside live Red vs Blue ranges and a competitive Battleground, all engineered for the AI era.

04 Live Products
R / B Red & Blue Ready
2026 Founding Cohort
Scroll
MITRE ATT&CKBURP SUITEMETASPLOITWIRESHARK SPLUNKWAZUHKALI LINUXNMAPNESSUS ELASTIC SIEMCOBALT STRIKEOSINT MITRE ATT&CKBURP SUITEMETASPLOITWIRESHARK SPLUNKWAZUHKALI LINUXNMAPNESSUS ELASTIC SIEMCOBALT STRIKEOSINT

● LIVE NOW

Our Products.

Four live platforms individuals and teams compete and train in directly — one part of everything Air Realm runs. Our full service portfolio, from VAPT to OT Security, is below.

LIVE

Battleground

Competitive jeopardy and attack-defense challenges across web, crypto, pwn, forensics, reversing, and OSINT — live leaderboards, seasonal events, solo and team play.

air-realm.duckdns.org
RankTeamScore
    LIVE

    Red Realm

    Offensive simulation infrastructure for adversary emulation — build attack chains, pivot through networks, and test exploit development in isolated ranges.

    redrealm-koth.duckdns.org
    
          █
    
        
      
    LIVE

    Blue Realm

    Defensive ranges wired with real SIEM and EDR telemetry — triage alerts, hunt threats, and run incident response against live, planted attack data.

    bluerealm.duckdns.org
      LIVE

      Onyx

      Always-on hands-on labs — live VMs, real networks, and a growing set of challenges anyone from complete beginners to working professionals can jump into anytime.

      onyx.air-realm.io
      web-lab-01Running
      AD-labRunning
      pwn-101Running
      forensics-3Queued
      net-basicsRunning
      crypto-introRunning

      ● ENTERPRISE TOOLING

      Train & Operate On Real Tools.

      Every range runs on the same industry-standard tooling production security teams rely on — not cut-down simulators.

      SplunkSplunk
      WazuhWazuh
      VelociraptorVelociraptor
      WiresharkWireshark
      TheHiveTheHive
      MISPMISP
      MetasploitMetasploit
      NmapNmap
      Kali LinuxKali Linux
      Burp SuiteBurp Suite
      ElasticElastic SIEM
      MITRE ATT&CKMITRE ATT&CK

      ● OUR SERVICES

      Full-Spectrum Services. One Team Of Operators.

      All active today — delivered by the same operators who build and run our live ranges, not a separate bench of consultants.

      ACTIVE

      VAPT

      Vulnerability assessment & penetration testing across web, mobile, network, cloud and API attack surfaces — manual testing backed by proof-of-exploit reporting.

      Learn More →
      ACTIVE

      SOC-as-a-Service

      24/7 managed detection & response — log monitoring, threat hunting, and incident response delivered by analysts trained inside our own Blue Team range.

      Learn More →
      ACTIVE

      Training Platform

      Video lectures and hands-on practice challenges for SOC analysts and red teamers — separate from live competition, built for steady skill-building at your own pace.

      Learn More →
      ACTIVE

      OT Security

      Security assessment and monitoring for operational technology and industrial control systems — built around the safety and uptime constraints IT-style testing ignores.

      Learn More →
      ACTIVE

      Research & Innovation

      How we collaborate — original research, tool development, and partnerships with academia and industry that feed directly back into every range and service we run.

      Learn More →

      WHY AIR REALM

      Built By Operators, Not Vendors.

      01

      Offense Informs Defense

      Red and Blue live in the same ecosystem, so every attack we build makes our detections sharper — and every detection we tune makes our attacks harder to spot.

      02

      Enterprise-Grade Ranges

      Real SIEM, real EDR, real attack infrastructure — not toy sandboxes. What you practice on is what production security teams actually run.

      03

      AI-Era Ready

      Scenarios are built for the threats and tooling of now — AI-assisted attacks, AI-assisted detection, and the analysts who have to keep up with both.

      04

      Founder-Led

      No support ticket queue. Direct access to the team designing the ranges, the services, and the roadmap.

      05

      Always Evolving

      New scenarios, new challenges, new attack paths — the Realm is a living environment, not a static course.

      06

      One Realm, Every Discipline

      Compete, defend, attack, and train in a single connected platform instead of stitching together five different tools.

      ROADMAP

      Where The Realm Is Headed.

      Phase 01 — Live

      Live Products & Full Service Portfolio

      Battleground, Red Realm, Blue Realm, and Onyx, plus VAPT, SOC-as-a-Service, Training Platform, OT Security, and Research & Innovation — all live today.

      Phase 02 — In Progress

      Dedicated OT Security Range

      A live, safe-to-break ICS/SCADA range environment, built on the same infrastructure as our IT-focused ranges.

      Phase 03 — Upcoming

      Formal Certification Tracks

      Assessed certification paths built on top of the Training Platform's existing lecture and hands-on lab content.

      Phase 04 — Upcoming

      Expanded Research Partnerships

      Growing our academic and industry collaborations under Research & Innovation into a standing, published research program.

      FROM THE REALM

      Latest From The Blog.

      View All Posts →

      ● LIVE FEED

      Cyber News.

      Real-time headlines aggregated from trusted security industry sources.

      Dark Reading

      [Virtual Event] Cybersecurity Outlook 2027

      Dark Reading

      [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI

      BleepingComputer

      Iris Ohyama data cloud breach exposes info of 7.7 million customers

      Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company used. [...]

      SecurityWeek

      Brava Security Emerges From Stealth With $15 Million in Funding

      Its multi-agent AI platform generates the telemetry an attack would produce to fix gaps in enterprise defenses. The post Brava Security Emerges From Stealth With $15 Million in Funding appeared first on SecurityWeek.

      BleepingComputer

      Hackers pull off $133 million French bank heist via service provider

      French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v [...]

      BleepingComputer

      CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

      Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification steps and affiliate networks to generate revenue without delivering the promised rewards. [...]

      Dark Reading

      [Virtual Event] Cybersecurity Outlook 2027

      Dark Reading

      [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI

      BleepingComputer

      Iris Ohyama data cloud breach exposes info of 7.7 million customers

      Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company used. [...]

      SecurityWeek

      Brava Security Emerges From Stealth With $15 Million in Funding

      Its multi-agent AI platform generates the telemetry an attack would produce to fix gaps in enterprise defenses. The post Brava Security Emerges From Stealth With $15 Million in Funding appeared first on SecurityWeek.

      BleepingComputer

      Hackers pull off $133 million French bank heist via service provider

      French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v [...]

      BleepingComputer

      CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

      Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification steps and affiliate networks to generate revenue without delivering the promised rewards. [...]

      View All News →

      Ready to test your defenses
      — or build your offense?

      Join the founding cohort, request early access to our services, or just talk to the team.

      GET IN TOUCH

      Let's talk security.

      Whether you want early access to the Realm, a VAPT briefing, or just want to say hello — reach out.