Skip to content
Range Compare

Range guide · Running it · Lesson 07

One platform or several: when combining training types makes sense

Short answer

One platform that sells several training types saves procurement and gives one place for evidence. Specialists can go deeper in the type you need most, or cost less to start. Choose by your first gap and your team's capacity to run a programme, not by the length of a product list.

By The Range Desk · Cyber Range Compare · Published 2026-10-09 · Updated 2026-10-11

Desk research from public vendor, standards and regulator pages read on 27 September, 11 October and 13 October 2026. Profiles follow our published method; we did not run the products.

3 min read

Several platforms on this site sell more than one training type, and the temptation is to buy the broadest. Sometimes that is right. Sometimes a specialist, or a pair of specialists, fits better.

Which platforms sell several types?

On the pages we read:

  • Immersive Labs sells labs, a live-fire range and crisis simulation on Immersive One, and lists non-technical employees among its lab audiences.
  • Cyberbit sells a range and labs, with Crisis Sim 360 as an add-on only.
  • Hack The Box sells labs and Crisis Control, a platform-led tabletop, and lists SOC Range access for an individual plan from Q4 2026.
  • TryHackMe sells labs and tabletop exercises, and lists SOC and threat hunting simulators.
  • Cloud Range sells live-fire range exercises and hands-on labs, and lists simulation-supported tabletop exercises.

Others specialise: Reflex Security, iluminr and Conducttr sell crisis exercises only, SimSpace builds and attacks environments for teams and AI agents, and KnowBe4 sells awareness training. The platform fact grid shows the full picture.

When does one platform fit?

When you have gaps at more than one level and the capacity to run a programme across them. A single platform gives one contract, one set of user accounts and one place for evidence. Some platforms also link the levels inside one exercise, as Cyberbit does when technical escalations trigger executive decisions in Crisis Sim 360. Immersive Labs is candid that breadth needs ownership: someone has to decide which of labs, drills, range and crisis simulation each team gets.

When do specialists fit better?

When your first gap is clearly in one lane and you want depth there. A team whose problem is executive decision-making may get more from a platform built only for crisis exercises than from the crisis module of a technical platform, and the reverse is true for a SOC with a detection problem. Specialists can also be cheaper to start: a technical team can begin labs on a free tier while buying a separate crisis simulation for leadership.

How do you run a pair of platforms without duplicating work?

Give each platform a clear lane and an owner. For example, labs and range for the SOC on one platform, crisis exercises for leadership and responders on another. Agree one format for evidence, such as the gap, fix and retest structure from the previous lesson, so the board sees one story rather than two vendors' reports. And schedule them together: a range exercise one month, a crisis exercise built on a similar scenario the next, with findings from the first feeding the second.

What questions should decide it?

  1. Where is your first gap, and does the broad platform's offer in that lane match a specialist's?
  2. Who will run the programme, and how much time do they have?
  3. Do you need one evidence trail, or can you combine two?
  4. Can you start in the first lane for free or at a published price?

What next?

The last lesson looks at what training platforms now automate with AI, and what to check before you rely on it.

Sources used in this lesson

Next lesson

Lesson 08 · 3 min

What training platforms now automate with AI, and what to check

Where AI now appears in labs, ranges and crisis exercises, what vendors say it does, and the questions to ask before relying on it.