Investigation Coverage
Current Lead
Review the maintenance request and validate the operational context before acting.
Operator Telemetry
Live session activity- Plants online
- 0
- Warnings
- 0
- Overloads
- 0
- Critical
- 0
- Active alerts
- 0
- Incident
- No active incident
Grid Operations Mail
Top Stories
Blue Team / Incident Response
Alert Queue
UnresolvedEvent Stream
Recent telemetry| Time | Source | Event | Severity |
|---|
Detection Overview
Severity Distribution
Event Activity
Top Sources
Learning HubTraining & ReferenceOpen training reference
Power Plant Control
Simulation Information
Overview
Welcome to the SCADABreach simulation environment. This platform is designed purely for educational and training purposes.
All systems, events, names, locations, and infrastructure presented inside the simulation are fictional and exist solely to model realistic cybersecurity and ICS/OT scenarios.
Getting Started
Begin in the Mail tab. Review the urgent unread message and inspect the operational request it contains.
Then move to the Console and act only on information you discover through the interface. The scenario will unfold from your decisions — stay observant.
Simulation Capabilities
SCADABreach is an interactive cybersecurity simulation focused on SOC investigation, incident response, OSINT analysis, Linux-based evidence gathering, ICS/OT monitoring, and a dynamic narrative unfolding during a large-scale energy crisis.
This is not a traditional game or a typical CTF. It is a self-contained cyber range that allows players to:
- work inside a simulated Linux terminal with a realistic file system,
- analyze system logs and alerts,
- investigate phishing and ransomware scenarios,
- monitor power plants and respond to operational incidents,
- track global events through dynamic news feeds and operational mail,
- uncover the story through actions rather than forced dialogue,
- receive a persistent final incident report and after-action assessment when the scenario is contained.
Everything happens locally in your browser — no installation or external tools required. The experience is designed to feel like operating a connected SOC workstation, investigation terminal, mail system, news desk, and ICS monitoring environment in one cohesive interface.
Project Purpose
I've always been passionate about cybersecurity and immersive, realistic training. I wanted to build something that sits between:
- simple CTF challenges,
- overly technical lab environments,
- and enterprise-grade cyber ranges that few people have access to.
The goal was to create an experience that:
- feels like a real operator’s workstation,
- behaves like an actual system,
- is approachable to newcomers,
- and challenging for experienced players.
About the Creator
I am a cybersecurity enthusiast with an analytical mindset, constantly learning, experimenting, and developing my skills. I enjoy projects that require logical thinking, patience, and creativity — and SCADABreach is the result of that passion.
Contact
If you want to share feedback, report an issue, suggest a feature, or simply talk about the project, feel free to reach out.
arturkret44@gmail.comEvery message is appreciated — SCADABreach was created for the community, and your insight truly matters.
Feedback & Collaboration
Whether you are a:
- player,
- pentester,
- SOC analyst,
- ICS/OT specialist,
- content creator,
- or simply a curious mind…
…you are welcome to contribute ideas, test the environment, or discuss potential collaboration.
Community feedback helps SCADABreach grow and evolve.
Roadmap
This is only the beginning. More content will be added over time, including:
- new scenarios,
- expanded mechanics,
- additional features,
- and world-building updates.
Thank you for playing.
Stay focused — where others see chaos, you see the signal.
Important Notice
This simulation is intended strictly for educational and training purposes. All systems, events, names, infrastructure and scenarios presented here are fictional and do not represent real-world organizations or systems.
This environment simulates security operations and industrial processes. Simulation progress is stored locally in this browser and can be resumed later.
You do not need to inspect or read the website’s source code to progress. All objectives, clues, and mechanics are intended to be discovered through normal gameplay only. Looking into the source code will only spoil the scenario for yourself.
To begin the scenario, open the Mail tab and read the urgent unread message. Use the Console only after you have reviewed the operational request.
Saved Incident Session
Saved incident metadata
Incident Resume Brief
- Session
- 00:00:00
- Current Access
- OPERATOR
- Grid Status
- 0 affected / 0 overload
- Investigation Phase
- Initial validation
- Known Compromise
- Not confirmed
- Decryption
- Not confirmed
- Exfiltration
- Not confirmed
- Last Significant Event
- Session checkpoint saved
Validate the maintenance request before acting.