A next-generation cybersecurity training and simulation platform that blurs the line between classroom instruction and real-world enterprise environments.
The Cyber Ready Clinic (CRC) Cyber Lab is not just a lab.
It is:
Students connect through a web browser, operate inside their own enterprise environment, and remediate the same security issues they would face as cybersecurity analysts in the field.
| Students Supported | 20 concurrent (scalable to 100+) |
| CMMC Control Families | AC, IA, SI, SC, MP, PE — all live (57 labs) |
| Access Method | Browser-based via Apache Guacamole |
| Infrastructure | Dual Proxmox hypervisors, 256GB+ RAM per node |
| Automation | AWX (Ansible) — seed, verify, reset, auto-advance, certificates |
| AI Integration | OpenHands IDE + MCP server for AI-assisted operations |
| Cyber Range | Structured CMMC labs + Open Range for pen testing |
| Network | Dreamwall firewall, 10Gb backbone, VPN remote access |
| Student Session Host | One PODXX-SRV member server per student at 10.50.XX.20 — all 20 built, domain-joined and mapped to studentXX |
| Domain Controllers | DC01-P01 / DC02-P01 — directory services (DNS, Kerberos, LDAP, SYSVOL) for all 20 pods; no student sessions |
Multi-pod architecture where each student operates inside their own isolated enterprise network. Real Windows Server environments, real Active Directory domain, real misconfigurations seeded via automation.
CMMC-aligned curriculum organized by control family — six live families and 57 labs. Scenario-driven labs that are step-by-step, GUI-first, and automatically verified by Ansible every 30 minutes. View Lab Families
Powered by AWX and Ansible, the automation engine handles lab seeding, verification, environment resets, and progress tracking. Deploy labs to 20 pods in under 2 minutes. Every skill is measurable.
Sandbox Active Directory domain and OWASP Juice Shop for unstructured learning — penetration testing, red/blue team exercises, and tool experimentation. Structured learning meets controlled chaos.
OpenHands AI IDE and MCP server integration for AI-assisted infrastructure operations. Students learn to work alongside AI — the future of cybersecurity operations.
| Step | Action | Details |
|---|---|---|
| 1. Seed | Instructor launches AWX job | Ansible deploys misconfigurations to all pods |
| 2. Connect | Student opens browser | Guacamole serves Windows RDP in the browser tab |
| 3. Remediate | Student fixes security issues | Using ADUC, PowerShell, Task Scheduler, etc. |
| 4. Verify | Verification runs automatically every 30 min | Ansible checks every objective — PASS/FAIL on the Training Tracker |
| 5. Advance | Family completion unlocks the next family | Auto-advance also issues completion certificates |
| 6. Reset | Environment resets for next class | All 20 pods reset in under 2 minutes |
Most training environments rely on isolated sandboxes or simplified, purpose-built simulations.
We’ve taken the opposite approach—building a fully functional enterprise domain that mirrors real-world operations and can be scaled, managed, and leveraged just as it would be in a live organizational environment.
| Traditional Training | CRC Cyber Lab |
|---|---|
| Theoretical — read and test | Hands-on — operate real systems |
| Manual VM setup per student | Automated seed/verify/reset via AWX |
| VPN + RDP client required | Browser-only access via Guacamole |
| Hours to reset between classes | Reset 20 pods in < 2 minutes |
| No verification | Automated PASS/FAIL per objective |
| Static, single-use labs | Living system — reset and reuse indefinitely |
| No AI integration | AI-assisted operations via OpenHands |
The CRC Cyber Lab is building toward:
| Resource | Link |
|---|---|
| Student Quick Start | How students log in and work the labs |
| Lab Guides | Completion guides for all six families |
| Lab Families | CMMC curriculum — AC, IA, SI, SC, MP, PE |
| Training Tracker | Per-pod progress dashboard |
| Architecture & Capabilities | Full infrastructure, capabilities, and roadmap |
| AWX Automation | Seed, verify, and reset workflows |
| Pod Infrastructure | Pod layout and student workspace |
| Domain Controllers | DC01 and DC02 configuration, directory services, retirement of the student session role |
| Pod Member Servers | Per-pod student session hosts and cutover plan |
| VM Inventory | All virtual machines across PVE1 and PVE2 |
| Network & Firewall | Dreamwall, VLANs, routing |
Download: CRC Cyber Lab Pitch Deck (PowerPoint) (right-click and Save As to download)
"We're not training users. We're building operators."
TCecure | Cyber Ready Clinic