CEI-LABS // MODULE 00 — COMMAND

CEI Labs

An open-source ecosystem for building and running self-hosted cyber training events on budget hardware — the range, the course of fire, the terrain, the operation, and the loadout, as five interlocking modules.

5 MODULES·59 CHALLENGES·3 TRACKS·$0 SOFTWARE COST·FULLY SELF-HOSTED
EXPLORE THE MODULES GITHUB ↗
SEC 01 / THE SYSTEM

Five modules, one range

How the ecosystem interlocks: the terrain underneath, the range on top of it, the course of fire feeding in, the loadout at the operator edge, and the operation watching all of it.

MODULE 02 WARGAMES

The course of fire — 59 challenges across 3 tracks, validated fail-closed.
deploys 59 challenges into (ctfcli → CTFd)
MODULE 01 ENGINE

The range — a multi-tenant cyber range on bare-metal K3s: CTFd, MultiJuicer, Kali noVNC.
runs on VLAN 20 of
MODULE 03 NET

The terrain — segmented, isolated, throttled network infrastructure everything runs on.
runs locally on each operator's laptop
MODULE 05 AGENT

The loadout — a friendly CTF coaching AI that runs locally on each operator's laptop.
tracks readiness
MODULE 04 EVENT

The operation — a full-scale, self-hosted CTF event: 80 operators, 59 challenges, zero cloud bill.
SEC 02 / MODULES
CEI-LABS // MODULE 01 — RANGE PLATFORM Engine

A modular, multi-tenant cyber range on bare-metal K3s.

≤30 OPERATORSENTER → CEI-LABS // MODULE 02 — COURSE OF FIRE Wargames

59 challenges, three tracks, one fail-closed deploy.

59 CHALLENGESENTER → CEI-LABS // MODULE 03 — TERRAIN Net

Network infrastructure built to survive 80 operators scanning it on purpose.

80 OPERATORSENTER → CEI-LABS // MODULE 04 — THE OPERATION Event

A full-scale, self-hosted CTF experience — 80 operators, 59 challenges.

80 OPERATORS · $0 CLOUDENTER → CEI-LABS // MODULE 05 — LOADOUT Agent

A friendly coaching AI that runs on your own laptop — no keys, no cloud, no GPU.

RUNS LOCALLYENTER →
SEC 03 / HOW A LIVE EVENT COMES TOGETHER

  1. Net stands up the segmented terrain — VLANs, isolation, DNS lockdown, QoS.

  2. Engine deploys the range onto VLAN 20 — CTFd, MultiJuicer, analyst workstations.

  3. Wargames validates fail-closed and loads 59 challenges into CTFd — the administrator starts each track independently.

  4. Each operator's laptop carries the Agent loadout — a friendly coaching AI running locally, installed with one command.

  5. Event tracks every remaining task until doors open.

SEC 04 / BUILT BY

CEI Labs was created by Ismael Rodriguez, with the support of Matthew Judge and CyberExperts.org.