CYROID | Fighting Smart Cyber

01 — The Platform

Deploy Cyber Ranges in Minutes, Not Days

Traditional cyber range deployment is slow, expensive, and requires specialized expertise. CYROIDCyber Range Orchestration in Docker changes that. Our platform automates the entire lifecycle of cyber training environments—from planning through execution to teardown.

Built on Docker-in-Docker architecture, CYROID provides true network isolation between ranges, allowing multiple concurrent exercises with identical IP address spaces without conflicts. Deploy complex, multi-node training scenarios through an intuitive visual interface.

Key Capabilities

Visual Range Builder — Drag-and-drop interface for designing network topologies
Complete Isolation — Docker-in-Docker architecture for true network separation
Multi-OS Support — Linux, Windows, macOS VMsVirtual Machines with 27+ pre-built templates
Web-Based Console — VNCVirtual Network Computing access to all VMs through your browser
MSEL Automation — Scenario-based inject triggering and event scheduling
Offline-Capable — Cache images for air-gapped deployments

02 — Lifecycle

Full Exercise Lifecycle Management

CYROID supports your entire cyber exercise workflow from initial planning through after-action review:

Planning & Design — Visual topology builder with templating and blueprints
Development — Content library with markdown-based lab walkthroughs
Deployment — One-click range instantiation with progress tracking
Execution — Real-time monitoring, inject management, connection tracking
Evidence Collection — Student submission portal with chain of custody
Scoring & Review — Automated hash verification and evaluator interface
Teardown — Automatic cleanup with privacy-first data purging

03 — Features

Platform Features

VM Template Library

27+ pre-built OS templates including Windows Server 2003-2025, various Linux distributions, Kali Linux, macOS, and Samba AD. Create golden images and snapshots for rapid deployment.

Network Orchestration

Dynamic network attach/detach, isolated range networks, and visual topology mapping. Multiple ranges can run simultaneously with identical IP spaces—completely isolated.

Scenario Automation

MSEL parser for YAML/markdown scenario definitions. Schedule injects, trigger events manually, and automate attack sequences during exercises.

Exercise Monitoring

Real-time execution console with multi-panel dashboard. WebSocket streaming for live event logging, connection tracking, and deployment progress visualization.

Blueprint Export/Import

Export complete ranges as portable blueprints including Dockerfiles and offline images. Reproducible environments for consistent training across locations.

Privacy-First Design

Data automatically purged after exercise completion. No long-term retention of sensitive training data. Air-gapped deployment support for classified environments.

04 — Use Cases

Ideal For

Military & Government

Cyber operations training with realistic adversary simulation. Support for classified environments with air-gapped deployment and CACCommon Access Card/PKIPublic Key Infrastructure authentication.

Educational Institutions

Cybersecurity curriculum delivery with hands-on labs. Scale from individual exercises to class-wide competitions with isolated student environments.

Red/Blue Team Exercises

Purple team integration with attack scenario scripting. Realistic threat simulation for defensive team training and incident response practice.

05 — Architecture

Technical Architecture

Built on a modern, cloud-native stack for reliability and scale

Infrastructure

Orchestration — Docker 24+ with Docker-in-Docker for range isolation
Database — PostgreSQL 16 with Redis 7 caching
Storage — MinIO for ISOs, templates, and artifacts
Proxy — Traefik 2.11 for HTTP routing and VNC access

Application

Frontend — React 18 + TypeScript + Tailwind CSS
Backend — FastAPI (Python 3.11) with async/await
Task Queue — Dramatiq with Redis broker
Deployment — Cloud, on-premises, or air-gapped