World of Labshock — Use Cases
Who Uses It.
And What For.
Eight things people do with Labshock that they could not do otherwise — because each one needs a real industrial process with no production consequences. Vendors demoing to prospects, startups building detection, security teams and governments testing the stack they already own, universities teaching, and engineers building the topology their own estate has.
Looking for your sector specifically — water, power, oil & gas, manufacturing, rail? See the industry breakdown.
Who runs it
Universities
Teach ICS security with systems students can actually operate
Who does this
Public research university, Arkansas. Built a 13-week Industrial System Security course around World of Labshock for 20+ students.
Research university, Erlangen, Germany. Runs the CYBERGY OT and industrial cybersecurity summer school with Labshock, for the second year running.
US research universities. Teach ICS and OT security using Labshock environments, on campus and in coursework.
What makes it possible
What they do
- Run an isolated industrial lab per student
- Assign guides, quests and badges as a learning path
- Teach automation, protocol analysis and detection
- Track student XP, levels and quests in Command Center
Training providers
Deliver paid OT courses without building the lab yourself
Who does this
Training academies and professional communities. Use Labshock to take people into industrial security — veterans transitioning into cyber, practising OT leaders, and academy students.
Cybersecurity training and research organisation. Delivers training on Labshock at scale.
Regional industrial cybersecurity initiative, Middle East. Uses Labshock to deliver industrial security training to their own customers.
Large technical training provider, United Kingdom. Delivers industrial cybersecurity training on Labshock environments.
What makes it possible
What they do
- Deliver instructor-led OT workshops and bootcamps
- Grant lab access for the duration of each course
- Record sessions and create reusable course material
- Reset the same industrial environment for each cohort
Security vendors
Demo your product on a real plant with no production behind it
Who does this
OT security vendors, Italy and international. Built a GE Mark VIe gas turbine environment on Labshock and use it to present their own product to customers.
Security research and services team, Europe. Tests their own products and services against Labshock environments.
Enterprise security solutions provider, United States. Commissioned a custom railway control lab and uses it to demonstrate their product to their own customers.
What makes it possible
What they do
- Match the customer’s protocols, devices and network
- Demo your product on live industrial protocol traffic
- Trigger process events and show your product detecting them
- Reset the environment and repeat the demo for each buyer
Product integration
Put a working industrial plant inside your own product
Who does this
Cybersecurity services and solutions provider, US. Run a dedicated Labshock OT environment for their industrial security work.
Workspace streaming and industrial storage/security platforms, US. Integrate Labshock into their own products, both to demonstrate capability to customers and to build a service on top.
What makes it possible
What they do
- Embed industrial environments inside your own platform
- Show your product working with real PLC and SCADA traffic
- Build a billable service around a working industrial lab
- Deploy on customer hardware without a cloud dependency
Security startups
Get OT traffic to build your detection product against
Who does this
Passive OT mapping and cyber-risk platform, France. Generated OT traffic on Labshock to validate their own discovery module.
Early-stage detection vendor, United States. Validates its IDS against multi-protocol OT traffic from running processes.
What makes it possible
What they do
- Generate labelled traffic across industrial protocols
- Tune detection rules against live protocol behaviour
- Test parsers for Modbus, S7comm, DNP3 and IEC 104
- Train and evaluate detection models with labelled OT data
Security teams
Find out whether the detection you already pay for actually fires
Who does this
State-level public sector, United States. Uses Labshock to work on critical infrastructure security capability.
National public sector, Europe. Uses Labshock for industrial security capability development.
Critical infrastructure operator. Uses Labshock to build and test OT security capability under realistic threat conditions.
What makes it possible
What they do
- Mirror lab traffic into the IDS you use in production
- Check SIEM ingestion, parsing and OT event correlation
- Change a process value and verify the resulting alert
- Test firewall rules at the boundary between IT and OT
Engineering teams
Build the exact topology your estate has, not a generic one
Who does this
Engineering services, own OT estate. Builds environments matching the architectures they work on rather than using the stock labs.
Early-stage OT security vendors, Europe and the US. Construct the topologies their own IDS has to survive — odd segmentation, mixed protocols, traffic they cannot otherwise generate.
Asset owners with their own OT estate. Recreate their own plant architecture — their segments, their controllers, their protocols — to test a change before it reaches production.
What makes it possible
What they do
- Define IT, DMZ and OT zones and the routes between them
- Add PLCs, SCADA, historians and firewalls to your lab
- Model segmentation and test how it handles live traffic
- Export and share environments for repeatable exercises
Conferences & community
Run a live OT test-and-defend session instead of a talk
Who does this
Security conferences, three continents. Ran Labshock on stage as live industrial systems rather than as a slide deck.
An industrial automation vendor's own users conference, not a security conference. Named Labshock in its own speaker spotlight, introducing it to an audience of automation engineers and operators.
Industrial cybersecurity community. Shows Labshock at conferences as hands-on industrial systems for attendees to operate.
What makes it possible
What they do
- Run scored OT challenges on working industrial systems
- Teach PLC logic and watch the industrial process respond
- Let attendees keep learning afterwards with the free tier
Already public
Organisations in the ecosystem
Universities, partners, academies and conferences whose involvement is a matter of record. Commercial customers are not on this list — see below for why.
Why there are no customer logos on this page
Naming an industrial operator as a security customer tells the internet which organisations are working on their OT gaps. Most of ours are contractually entitled to stay unnamed, and we think the rest should be too.
Universities, conferences and partners are named here because their participation is already public and costs them nothing. Commercial customers are described by profile only. If you want a reference conversation before buying, we will arrange one directly — info@labshocksecurity.com.
OT security must be testable, not documented.
Start in the free zone, or tell us what you need to prove and we will show you the environment that proves it.