GemForge Labs for Government & National Resilience

Build the cyber resilience national infrastructure depends on

Hands-on training for the teams who defend critical national infrastructure, and the evidence to show they are ready.

Speak to our public sector team Buying for government

National resilience

Protecting the services the public relies on

Essential services depend on one another, so a failure in one can spread to the next. The people defending them should already have rehearsed that.

Energy

Water

Transport

Telecoms

Health

Finance

Government

Emergency services

Practise the worst day before it arrives

Essential services rarely get a second chance. Teams work through realistic compromises, from first alert to recovery, so the decisions are already familiar when they matter.

Follow an intrusion from the first indicator to the final report, preserving evidence and building the timeline as you go.

Explore the incident response labs

Splunk search results alongside a GemForge Labs AWS SOC lab scenario

See your own estate through the adversary's eyes

Defence improves when people have walked the attack path. Each learner works in a private, disposable environment, entirely separate from your operational networks.

From reconnaissance through to post-exploitation, against targets built for the purpose.

Explore the offensive labs

Prepare for AI in the services you run

As AI is adopted into public services, a new class of failure arrives with it. Staff learn how LLM applications are manipulated and how to harden them before they are deployed.

Practise manipulating and then securing AI-powered applications in a safe environment.

Explore the AI security labs

HelpBot Customer support

Show leadership where resilience stands

Give ministers, regulators and boards a clear view of capability across teams and organisations, based on what people have demonstrated rather than what they have attended.

See progress for every team in one place, and assign labs, modules and pathways from the same view.

Ask for a walkthrough

Exercises

Test the whole response, not just the individuals

Resilience depends on leaders, responders and technology working together. Exercises put all three under realistic pressure, then report on how it went.

A mission rehearsal for your response

Like rehearsing a mission, an exercise puts leaders, responders and technology through the same unfolding scenario. What goes well, and what does not, becomes the plan for the next rehearsal.

How a mission rehearsal tests readiness Brief Roles assigned Inject 1 Alert raised Inject 2 Spread detected Inject 3 Service impact Report Gaps found Leadership Responders Technology Escalate Decide Communicate Triage Contain Recover Evidence Isolate Restore Strengths Gaps Actions Fix the gaps, then rehearse again Illustrative scenario. Each inject is released to the whole group, a role or one person on the dates you set.

Tabletop for leadership

Walk senior decision-makers through a realistic incident, with new information released as the scenario unfolds.

Tabletop with hands-on tasks

Pair the discussion in the room with practical work, so decisions are tested against real evidence.

Self-serve practical

A ready-made scenario your team launches on the platform, on your schedule, using your lab hours.

Full-scale with our consultants

A red and blue team exercise designed and run with our consultants, ending in a detailed report.

1

Agree the scenario

We settle the scenario, the roles and the dates with you.

2

Brief participants

Each participant receives their connection details and role briefing on the platform ahead of the start.

3

Run the exercise

Everyone sees what their role would see, with information released to the whole group, a role or one person on the dates you set.

4

Report

Leadership is notified as soon as the exercise report is released.

Find out about exercises

DCWF

Our labs and modules are mapped to DCWF

The DoD Cyber Workforce Framework (DCWF) defines the work roles of the cyber workforce. Our content is mapped to it, helping you see which roles your training supports.

Labs

Hands-on labs where people practise the work, mapped to DCWF work roles.

Modules

Structured modules that build the knowledge behind the work, mapped to DCWF work roles.

CPE tracking

We track continuing professional education (CPE) credits for completed labs and modules.

Outcomes

What changes for your programme

Decreases Response

Decisions made before the crisis

Teams that have rehearsed a disruptive attack already know their first moves when essential services are at stake.

Increases Awareness

A fuller picture of the threat

Ransomware, cloud compromise, identity attacks and lateral movement, met in practice rather than in a briefing.

Increases Assurance

Capability you can show

Labs record whether people can investigate, respond and recover, which is evidence a course certificate cannot give.

One programme, every team you answer for

A single subscription gives each team the full labs library, training modules and a monthly GFL AI allowance, whether you run one department or a whole sector.

We provide the environments. You direct the programme.

How to buy

Buying for the public sector

We work with your procurement and security teams from the first conversation, so buying is as straightforward as the training.

Straightforward purchasing

Tell us how your organisation prefers to buy and we will help you find the right route.

Security and data questions

Share what your assurance process needs and we will help you answer it.

Getting started

We help you set up accounts, teams and pathways so your people can begin quickly.

Speak to our public sector team

Tell us about your department, sector or programme and we'll get back to you about a briefing and how to buy.

  • A straightforward reply
  • Guidance shaped around your programme
  • No obligation

Questions from public sector teams

Answers for departments, agencies and infrastructure operators

What does a government subscription include?
Which sectors is this relevant to?
Can one programme cover several organisations?
How do we buy?
Where is our data held?
Can we set the curriculum?