Cyber Range · Real EC2 environments · Zero setup

Pentimento

Pentimento provisions actual AWS EC2 instances for every student accessible from any browser in seconds, with zero local setup, zero VPN, and zero IT tickets.

scroll
The problem with cybersecurity training

Most cybersecurity labs are fake. Students exploit Docker containers and call it hacking. We give them real AWS machines because real skills need real targets.

0
Real AWS EC2 Environments
Never sandboxes or containers
0
Client Installs Required
Any browser on any device
0
Lab Types in One Platform
CTF, Quiz, and Practice
24/7
Automated Lifecycle
Labs provision and terminate themselves
Solution overview

Solutions for every situation.

Extensive technical capabilities and flexible deployment options mean our cyber range adapts to any scenario, team size, or use case.

01
Solutions for Every Situation
Extensive technical capabilities and flexible deployment options mean our cyber range adapts to any scenario or use case.
02
Hire Top Tier Talent
Our engineers create simulated environments that mimic your infrastructure and incident scenarios helping you screen and interview security candidates at any level.
03
Extensive Exercise Library
Validate your cyber defences in battle-tested scenarios and simulations drawn from real-world attack playbooks and industry frameworks.
04
Cyber Range Without Limits
Tier-based pricing means you pay for what you need with unlimited users. Scale from a 10-person bootcamp to a 10,000-student university without changing plans.
05
AI Integrated
Our fully-functional integrated AI agent lets students and instructors tackle problems, get study recommendations, and research solutions without leaving the platform.
How it works

From idea to student in minutes.

Three steps. No CloudFormation knowledge. No DevOps team. Just build, assign, and watch your students learn on real infrastructure.

01 / BUILD

Design your topology

Drag Windows and Linux nodes onto a visual canvas. Connect them, define challenges, set a time limit. Preview your entire lab in a real browser before a single student sees it.

02 / ASSIGN

Publish with one click

The platform auto-snapshots your VMs, generates a CloudFormation template, and assigns the lab to your student groups. No manual steps, no waiting, no ops work.

03 / LEARN

Students open a tab

Browser-based RDP via Guacamole. No client, no VPN, no setup. Students see a live provisioning progress bar then they're in a real machine. Real exploits. Real skills.

The platform difference

Not a simulation.
An actual machine.

Every other cybersecurity training platform puts students inside containers, sandboxes, or throttled VMs. When a student "exploits" a service in those environments, nothing real happens because nothing real is running.

Pentimento is different. Every student gets their own dedicated AWS EC2 instance. When they run an exploit, it actually executes. When they move laterally through a network, the traffic actually flows. When they take down a service, it actually goes down.

This is the only way to build skills that hold up when it matters.

Real AWS EC2 instances

Not Docker. Not LXC. Actual EC2 machines running real Windows Server and Linux operating systems the same infrastructure your students will encounter in the field.

Browser-based RDP via Guacamole

Full desktop access directly in the browser. Students connect from a Chromebook, a personal laptop, or a school computer. No VPN, no software download, no IT ticket.

Automated from start to finish

Labs spin up, run for the assigned duration, and tear themselves down automatically. Hard timeouts prevent runaway costs. Race-condition-safe creation prevents double sessions.

Student experience

Everything a student needs
to actually learn.

01 / PROVISION

Live provisioning progress

Students watch their EC2 lab spin up in real time. No mystery loading screen a live progress indicator shows exactly what the platform is doing at every step.

02 / LAB TYPES

Three lab types in one platform

CTF challenges for competition, Quiz labs for assessment, and Practice labs for open-ended exploration each with in-browser challenge submission and real-time validation.

03 / SCORING

Real-time scoring and history

Know exactly what you got right immediately after each submission. Review every past attempt per question with full submission history and category-based performance stats.

04 / AI

AI-powered study recommendations

Gemini analyzes wrong answers and generates personalized guidance based on your specific mistakes not generic hints that apply to everyone in the cohort.

05 / BADGES

Automatic badge awards and SSO

Badges earned automatically on 95%+ lab completion. Real proof of skill, not just attendance. One-click login with existing Microsoft organizational credentials.

Instructor tools

Build any environment.
Publish with one click.

The lab builder handles the infrastructure complexity. You handle the curriculum. One publish action provisions real EC2 instances for every student in your cohort automatically.

Drag-and-drop lab builderDesign topologies visually no CloudFormation knowledge required
Live sandbox previewTest your lab in Guacamole before publishing to students
One-click publishAuto-snapshots VMs and generates CloudFormation template instantly
Active session monitoringSee all running sessions connect to any student VM directly
Registration codes with expiry1, 7, 30, 90, 180, or 365-day codes accounts auto-deactivate on expiry
Automated teardownLabs clean up their own EC2 and Guacamole sessions no zombie labs
Lab Builder · MDR-301 ● Live
+ Windows + Linux ⚡ Preview ✓ Publish
Digital Twins

A safe space to iterate,
innovate, and improve.

Refine your systems and develop your cybersecurity operations, proof of concepts, and team skills without disrupting live production environments.

Pentimento's Digital Twin environments replicate your actual infrastructure down to the OS, tooling, and network topology so what students and analysts practice in the lab maps directly to what they'll encounter in the field.

Use case: Mirror your client's Active Directory, firewall stack, and endpoint configuration then run red team exercises or train new analysts against a perfect replica before touching production.

Technology Agnostic
Fast & Easy Deployment
Unlimited Scalability
End-to-end Support
Cloud Based
Client Oriented
Ideal for
Red team training SOC analyst onboarding Proof of concept Tool evaluation Incident simulation Candidate screening
Custom lab service

Don't want to
build it
yourself?

Tell us the skills you want to teach. Our team delivers fully functional AWS EC2 lab environments built to your exact curriculum requirements ready to publish on day one.

No CloudFormation. No DevOps overhead. No learning curve. You describe the objectives. We build the environment.

Labs we build for you

Network exploitationSMB · LDAP · DNS · lateral movement
Active Directory attacksKerberoasting · pass-the-hash · BloodHound
Cloud misconfigurationS3 exposure · IAM privilege escalation
Malware analysisIsolated environments · tools pre-installed
SOC and blue teamSIEM · EDR · forensics environments
Web application securityOWASP Top 10 · SSRF · injection scenarios
Built for every format

One platform.
Every audience.

Universities and colleges

Deploy lab environments across your cybersecurity curriculum without managing infrastructure. Students access real machines from dorm rooms, labs, or anywhere. Registration codes with semester-based expiry keep cohort management clean.

Perfect for:semester courses · final exams · certification prep

Cybersecurity bootcamps

Move students from zero to employable faster with real-world environments. Every lab is a portfolio piece students can say they exploited a real Active Directory environment, not a simulation. Time-gated access matches your cohort schedule perfectly.

Perfect for:intensive programs · career-change courses · skills bootcamps

Corporate L&D and SOC teams

Run team tabletop exercises, red team training, and SOC analyst skill assessments in isolated real environments. Purple team drills, malware analysis, and incident response practice all on infrastructure that mirrors your actual environment.

Perfect for:SOC training · red team exercises · new hire onboarding

Tools and technologies we implement

Windows Server
Ubuntu Linux
Kali Linux
Splunk
Nessus
CrowdStrike
Palo Alto Networks
Elastic
Suricata
Snort
AlienVault
Acunetix
Fortinet
Corelight
Cisco
Check Point
Windows Server
Ubuntu Linux
Kali Linux
Splunk
Nessus
CrowdStrike
Palo Alto Networks
Elastic
Suricata
Snort
AlienVault
Acunetix
Fortinet
Corelight
Cisco
Check Point
Platform reliability

Built for real classroom load.

Infrastructure-level problems are our problem, not yours. Pentimento handles everything so your instructors and students never have to think about the platform.

Race-condition-safe
Lab creation prevents double-billing from duplicate session requests, even under heavy concurrent load.
Hard timeouts on all tasks
Labs that fail to provision don't hang indefinitely. Hard timeouts ensure no student is ever left waiting with no resolution.
Redis-cached connections
Guacamole connection data cached with automatic expiry for fast, reliable RDP access every single session.
Rate-limited auth endpoints
All auth endpoints rate-limited. JWT token rotation and blacklisting protect every account on the platform.
Microsoft OAuth
Proper CSRF state validation on every auth flow. Zero secrets stored in Docker images. Security at every layer.
Optimized for scale
DB indexes on all hot query paths. The platform stays fast and responsive as your student count grows from 10 to 10,000.

Ready to run
real labs?

Schedule a live demo. We'll spin up an actual EC2 environment during the call so you can see a real lab provision in real time.

For universities, bootcamps, and corporate security teams · Response within one business day