Forge your Cyber Security skills by doing practical labs inspired by real incidents and offensive scenarios.
Beginner Friendly Affordable No Fuss
Choose your path
Start preparing on your own, or bring GemForge Labs into your organisation.
For individuals
Explore cybersecurity through practical lab time backed by the theory you need. New to GemForge Labs? Sign up and get your first 5 hours of lab usage free.
For organisations
Give your people access to practical cybersecurity labs without lengthy setup. GemForge Labs helps organisations reduce lead time, control costs and strengthen operational resilience.
Public sector
A direct route for government and public-sector teams looking to build practical cyber capability.
Built for the forge floor
Access expertly curated practical labs. From beginner to advanced, we offer the opportunity to upskill with affordable, engaging and immersive environments.
Get practical environments running quickly, reducing the lead time between deciding to learn and actually learning.
Focus spend on developing capability rather than carrying unnecessary infrastructure and setup overhead.
Build confidence through practical experience so teams are better prepared to respond when it matters.
Connect the concepts learners need to understand with the hands-on exercises that make those concepts stick.
5h
Free lab usage
Fast
Environment spawn
Practical
Hands-on upskilling
B2B + B2C
Built for both
Labs
Reinforce your skills in a real-world environment by completing objective-based labs and competing with other members of the community.
Community
Don't just take our word for it, our players enjoy the labs as much as we do.
“
”
It is a real honor to take the very first blood and first solve on GemForgeLabs. Ghost in the Machine was not just a fun lab for me. I could really feel the amount of thought that went into its design, especially in this AI era.
“
”
GemForgeLabs makes its labs feel memorable instead of just technical. Power Hell somehow made PowerShell fun for me through infernal runecraft, while Ohm Sweet Ohm stood out with its polished setup and unexpected details.
Blog
Stay up to date with the latest security insights, lab releases, and community highlights.
How to list the ports a Linux server is listening on with ss and lsof, read the output, and decide which services should not be exposed.
What Windows Event ID 4625 means, how to read its status codes and logon types, and how to tell a mistyped password from a brute-force or password spraying attack.
Learn how to check email headers for phishing. View full headers in Outlook, Gmail and Apple Mail, read the Received chain and understand SPF, DKIM and DMARC results.
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets an unauthenticated threat actor run code on PHP servers. Learn how the attack works and how to patch it.
Learn how to change careers into cybersecurity in 2026. Discover the skills, certifications, career paths and job-search strategies you need to get started.
The sun is shining. Out-of-office messages are going out. Half of the security team is wrestling for space around a hotel pool. The rest are frantically trying to figure out who can approve an emergency firewall upgrade.
Learn how to detect DNS tunnelling in Wireshark by analysing an Iodine PCAP. Identify unusual DNS queries, changing subdomains, encoded data and traffic patterns.
In this post, we’re taking a look at the different styles of cybersecurity and IT training, how people actually retain technical skills, and why we at Gemforge Labs are advocates that practical gamified learning is one of the most effective ways to build lasting knowledge.
Ready to enter the forge?
Whether you're an individual looking for hands-on practice or an organisation planning your next programme, let's talk.
Cookie Preferences
We respect your right to privacy. You can choose not to allow some types of cookies. Your cookie preferences will apply across our website.
These are required cookies for the site to function.
These cookies help us improve the site by tracking which pages are most popular and how visitors move around the site.
These cookies are used to improve your advertisement experience across our website, we have disabled these by default
