Ronin66
RONIN66 provides offensive security labs that replicate real enterprise networks, including multi-domain Active Directory trusts and active EDR/SIEM defenses. The platform offers 15 labs—13 standalone machines, one AD chain, and one red team lab—each spun up as a private instance accessible only via the user's VPN IP. Access is managed through a Patreon subscription at €20 per month with Discord-based lab orchestration.
- Cybersecurity
- Education Technology
- Software Only
- Artificial Intelligence
- Enterprise Software
Funding
Founders
Founder details are not available yet.
Product
Problem
Traditional cybersecurity training often relies on simplified, single-path labs that fail to prepare professionals for the complexity of real enterprise environments. These sanitized exercises do not expose learners to active defenses, multi-domain Active Directory trusts, or the ambiguity of real-world attack surfaces, leaving them under-equipped for actual red team engagements.
Solution
RONIN66 provides professional offensive security labs that replicate true enterprise environments, complete with multiple attack paths, intentional rabbit holes, and decoy hosts. The platform challenges users to weaponize vulnerabilities against active EDR and SIEM defenses, navigate complex multi-domain Active Directory trusts, and distinguish viable attack paths from dead ends. Each lab spins up as a private copy accessible only from the user's VPN IP address. The environment includes standalone machines for targeted skill development and a full corporate network rebuilt from a real engagement, with a single final flag in the AD chain to keep the focus on attack path execution rather than CTF-style flag hunting.
Target Audience
Primary users are offensive security professionals, penetration testers, and red team operators seeking realistic enterprise-grade training environments to build and validate advanced exploitation and lateral movement skills.
Features
- 15 labs total: 13 standalone machines, 1 Active Directory chain, 1 red team lab covering Windows and Linux platforms
- Active Directory chain with multi-domain trusts, hard difficulty, and maximum 350 points
- Active EDR and SIEM defenses that respond to attacker actions in real time
- Multiple viable attack paths alongside intentional rabbit holes and decoy hosts
- Single-flag design in AD environments to emphasize attack path execution over flag hunting
- WireGuard VPN access with per-user authentication and private lab isolation
- Discord-integrated lab management via Slash commands for registration, VPN configuration, and lab orchestration