Labs Pricing About Updates Contact
Sign In Get Started

Welcome to Cloud Labs
Hands-on labs for real cloud IR skills

Start free or go all-in!

Get Started

What You’ll Get Inside Cloud Labs

Hands-on practice with cloud incident response plus guidance and recognition that help you level up fast.

Real-World Scenarios

Investigate phishing, token abuse, ransomware, cryptojacking, etc

Cloud Focused

Microsoft 365, Azure, Sentinel, AWS, and more

Guided & Hands-On

Step-by-step investigation with hints and detection challenges

Proof You Can Share

Certificates and badges on higher tiers to show your progress

A few of the latest labs, with new labs added regularly!

Bucket Reaper: Static Site Hijack & AWS Backdoor

Investigate how a ransomware note ended up in a S3 bucket.

Added: August 2025

Sentinel: Cryptojacking via RunCommand

Showcase your Sentinel skills in this lab to investigate why the monthly bill is so high.

Added: August 2025

Silent Forwarding: Detecting Malicious Mailbox Rules

Threat actors love forwarding rules, can you find out what they were after?

Added: August 2025
Explore Our Labs

Pricing Plans

Start free or unlock all labs to build real skills. Clear pricing, no hidden fees.

Basic

€0 /month

Perfect for beginners or curious explorers

  • Access to 3 starter labs
  • Guided walkthroughs
  • Community support
  • Premium labs
  • Digital certificates
Start Free Labs
Popular

Premium

€34,99 /month

Level up your cloud incident response skills with premium labs

  • 10+ Premium labs
  • Expert hints
  • Email support
  • Early access to new labs
  • Exclusive adversary scenarios
  • Digital certificates
Unlock All Labs

All-in

€49,99 /month

For the most dedicated learners that want to master cloud incident response

  • All lab types access
  • Exclusive adversary scenarios
  • Official Credly badges
  • Priority support

Our Labs

All labs are designed by people with real life cloud incident response experience. We want you to get hands-on experience with different cloud environments and services. So that the next time you see something similar you can respond effectively.

Explore Our Labs

About Invictus Incident Response

Invictus Team Photo
We founded Invictus Incident Response to tackle the surge in cloud cybersecurity incidents and the gap in truly effective cloud incident response. As seasoned veterans in cloud security, we've seen firsthand that handling complex incidents requires more than just reacting but it demands proactive and expert intervention. Our mission is simple: help you emerge stronger and remain unconquered in the face of cyber adversity – that's the Invictus spirit.

Contact Us

Have questions? We're here to help. Reach us at cloudlabs@invictus-ir.com.

Frequently Asked Questions

Everything you need to know about our services and pricing

Just sign-up for the Basic plan and enjoy the Basic labs. If you like it, you can upgrade to the Premium plan, but you will not be charged until you sign-up for a paid plan.
You can make any changes to your subscription through our Billing Portal. When upgrading, you'll get immediate access to the new features. When downgrading, the changes will take effect at the start of your next billing cycle.
Yes! We offer volume discounts for organizations, the minimum amount is 3 people. Reach out to cloudlabs@invictus-ir.com to learn more get started.
You can access your invoices via the Billing Portal.
You can always contact us at cloudlabs@invictus-ir.com.
If you require a quote or invoice or need to go through a PO process, just reach out to us at cloudlabs@invictus-ir.com and we can get you sorted.

Ready to get started?
Join free today.

Get Started Contact Sales