Scenarios
23 environments. Modeled on real incidents.
Pick from a library of click-and-run scenarios across IT, ICS, and OT. Each environment is built around real operating conditions — and many are direct reconstructions of incidents that hit the news. New environments release monthly; previous ones cycle through a quarterly rotation.
Featured
Scenarios with full write-ups
The marquee scenarios. The full environment library appears below.

Red vs. Blue Scenario
Agricultural Factory & Plant Red vs. Blue Scenario
The Plant Factory & Store is a sprawling, digitally integrated manufacturing environment (one of the largest in ThreatGEN® Red vs. Blue version 1.x). It leverages advanced Industrial Control Systems (ICS), including Supervisory Control and Data Acquisition (SCADA) and Distributed Control Systems (DCS), to automate production and manage logistics. The network map reveals a complex web of interconnected OT (Operational Technology) and IT assets, spanning from field devices and PLCs to business systems and remote access point.

Red vs. Blue Scenario
Car Manufacturing Facility Red vs. Blue Scenario
A major American automotive manufacturing facility ("The Plant") that produces vehicles for the domestic and international markets has detected unusual network activity within its industrial control systems. The Plant is renowned for its advanced robotics, just-in-time production systems, and innovative electric vehicle development, contributing significantly to American manufacturing leadership.

Red vs. Blue Scenario
Research Laboratory Red vs. Blue Scenario
A leading biomedical research institution ("The Institute") dedicated to advancing human health through genomic research and animal models has detected unusual network activity. The Institute is renowned for its work in genetics, cancer research, and immunology, contributing significantly to global medical advancements.

Red vs. Blue Scenario
IT Management Software Development Company, Red vs. Blue Scenario
Inspired by the SolarWinds incident, our team has decided to build an amazing IT Management Software Development Company environment.

Red vs. Blue Scenario
Call Center Red vs. Blue Scenario
The "Call Center" ThreatGEN® Red vs. Blue scenario demonstrates a bustling call center environment, wherein customer service is paramount, and data security is critical.

Red vs. Blue Scenario
Power Plant Red vs. Blue Scenario
Inspired by the various cyberattacks in the Russia-Ukraine war, our team has decided to build a thrilling power plant environment. Will you step into the shoes of the attackers and disrupt the power plant's operation by damaging its turbines?

Red vs. Blue Scenario
MWAA 2023 Water Utility Red vs. Blue scenario
Summary The Municipal Water Authority of Aliquippa (MWAA) cyberattack from November 2023 is a significant incident that highlights the vulnerabilities in critical water infrastructure. Here is a the AutoTableTop™ scenario that has more details associated with the document Red vs. Blue Scenario Here is the mission briefing within Red vs. Blue: A municipal water authority reported on…
Full library
All 23 environments
The complete in-game roster, grouped by IT and ICS / OT. Professional version users see the active rotation; custom environments are available for Enterprise and Enterprise+ license holders.
ICS / OT
Industrial control system environments
- Pipeline Company
- Manufacturing Plant
- Large Oil and Gas
- G.R.E.G. Facility
- Car Manufacturing Facility
- Printing Facility
- Railway System
- Bodungen's Bourbon Distillery
- Water Treatment / Pump System
- Power Plant
- Plant Factory & Store
IT
Information technology environments
- IT Services Company
- CDN Point of Presence Network
- Data Science Company
- Large Legal Office
- Software Development
- Marketing Company
- The Casino
- IT Management Software Company
- Crypto Neobank
- Call Center
- Smart Restaurant
- Research Laboratory
Pick one. Play.
Run any of these against your team.
Choose a bundle that fits your team and start running Red vs. Blue scenarios today.
