Current Focus
CGE is moving from an impressive collection of working lab components toward a repeatable cyber-range platform: quicker scenario deployment, clearer operator controls, stronger validation, and better exercises for analysts.
What is working
- Repeatable Windows and Linux lab deployment with authenticated remote management.
- Integrated attack, defender, identity, network, and telemetry layers.
- Scenario contracts with generated per-run flags and validation checkpoints.
- Local-first knowledge retrieval and agent-assisted engineering.
- Deterministic publication checks that keep internal operational details out of public material.
What we are improving
- Turning scenario definitions into complete, resettable exercise deployments.
- Making analyst workflows and defender reconstruction more coherent.
- Reducing orchestration friction through a durable control plane and bounded agent roles.
- Treating generated dashboards and documentation as products rather than raw filesystem mirrors.
- Packaging SAGA for dedicated on-premises and hybrid deployments without making cloud services mandatory.
Direction
The goal is not a permanently running museum of vulnerable machines. It is a range that can create the right environment for an exercise, prove that the intended paths work, collect meaningful telemetry, and reset cleanly for the next run.