Rhombus use-case briefingTraining range & CTF
Train cyber teams on the kit they will deploy with
Rhombus turns the kit into a self-contained cyber range with vulnerable targets, realistic traffic and a capture-the-flag (CTF) scoreboard. Teams train on their mission sensors and tools, with no cloud range or internet connection.
Why it matters
- Skills learned in class transfer directly, because students train on the kit they deploy.
- Vulnerable targets and replayed attack traffic give defenders real alerts without touching production networks.
- A scoreboard turns each lab into an objective, measurable skill check.
How it works on Rhombus
- The console deploys a training environment: CTFd, OWASP Juice Shop, DVWA and an attack workstation.
- Packet capture (PCAP) replay feeds realistic sessions to the monitoring sensors.
- Challenge sets import from code and re-import cleanly between cohorts. Several events can share one CTFd.
- Instructor-run exploitation labs sit behind an egress firewall, and their deploy fails if the internet is reachable.
From deployment to results
- Deploy the training environment from the console.
- Import the challenge set and start traffic replay.
- Run the labs and score each objective in CTFd.
- Reset to the known-good baseline before the next cohort.
Defense and government use cases
- Pre-deployment training for defensive cyber operations (DCO) and cyber protection teams.
- Attack-and-detect exercises against vulnerable web targets, watched by the kit's sensors.
- Sustainment training at forward sites without internet access.
Commercial use cases
- Security operations center onboarding for banks and financial services.
- Hands-on incident response drills for enterprise and critical infrastructure teams.
- Isolated, repeatable ranges that managed security service providers (MSSPs) run for analysts.
Outcomes
- Instructors see scored progress per student and team.
- Students detect attacks with the tools they will use on mission.
- Every cohort starts from the same known-good baseline.
Considerations
- Size classes to kit resources. Some labs need one virtual machine per student.
- Instructors stage some course assets. Shared analyst desktops are optional and licensed separately.
- Reset restores the delivered baseline; it does not securely erase data.
Integrated tools
- CTFd
- OWASP Juice Shop
- DVWA
- PCAP replay
Commercial products are licensed as part of your configuration. Product names are trademarks of their respective owners, and their use does not imply endorsement.