OT/ICS Training Range
The grid runs on trust.
We teach you to break it.
Sanraksha.CHAKRAVYUH is a production-grade OT/ICS cyber range. It simulates power generation, transmission, distribution and refineries down to the PLC register level, drives them with real process physics, and lets you attack and defend them from a live OT SOC. Built by Sanraksha Consultancy and Services LLP.
01 · Simulate
Real process physics, down to the register.
Every sector is a live Modbus/DNP3 device map modelled on real Indian infrastructure: a BHEL 500 MW thermal unit, a PGCIL 400 kV substation, distribution feeders and a refinery crude unit. First-order process dynamics, realistic measurement noise and safety-instrumented 2-of-3 voting make the plant behave like the real thing.
Register-level PLC maps
Coils, discrete inputs, holding and input registers per sector, with protection relays (87G, 40G, distance zones) and turbine, boiler and generator instrumentation.
MODBUS · DNP3 · IEC 61850Live process physics
First-order lag dynamics, grid inertia, AGC control loops and SIS voting. Push a setpoint and the plant responds the way a real unit would, with alarms and trips.
PHYSICS ENGINEAnimated HMIs & historian
ISA-101 process mimics, substation single-line diagrams and refinery P&IDs, plus a full historian with tag browser, multi-pen trends and alarm history.
ISA-101 · HISTORIAN02 · Detect
An OT SOC built for the plant floor.
Work a live alert stream fed by Zeek OT protocol analysers and Suricata, mapped to the Purdue model and MITRE ATT&CK for ICS. See which sector is under attack, which technique is running, and what to do about it.
OT SIEM & alert queue
Modbus writes, illegal function codes, rapid polling, GOOSE anomalies and RDP pivots surface as prioritised alerts with the Purdue level and kill-chain stage.
ZEEK · SURICATAAsset discovery
Passive and active discovery builds the OT asset inventory by Purdue level, with protocols, firmware versions and the detections watching each device.
PURDUE MODELAnomaly detection
An LSTM autoencoder learns normal process behaviour and flags deviations a signature never would, alongside a statistical z-score detector that is always on.
ML · GPU-OPTIONAL03 · Attack
The playbook the adversaries actually use.
Twenty-plus scenarios modelled on real ICS incidents — CRASHOVERRIDE, TRITON, Stuxnet-style logic changes, cascade failures, protection miscoordination — each animating its effect on the live HMI so defenders see the damage as it happens.
Named ICS campaigns
CRASHOVERRIDE, TRITON/SIS bypass, historian pivots, GOOSE spoofing, AGC hijack and rogue RTU injection, staged phase by phase with MITRE technique mapping.
20+ SCENARIOSAttack generator
Describe an attack in plain language and generate a valid campaign, from entry point to impact, ready to run against a sector.
AI-ASSISTEDBlue-team hardening
IEC 62443-aligned hardening tasks with real verification: segment the network, authenticate DNP3, deploy OPC-UA certificates, and prove each control works.
IEC 6244304 · Train & run cohorts
From first shift to running the whole exercise.
Instructors build timed, team-scoped exercises against a private plant per team, launch attacks at individual teams or all at once, and score detection, response and hardening live on a shared board.
Multi-tenant exercises
Organisations, teams and users with role-based access. Each team gets its own isolated plant, so an attack on one never touches another.
PER-TEAM ISOLATIONLive scoreboard
Detection, response and hardening points per team and per analyst, ranked in real time. Scoring runs only while the exercise is live.
SCORING ENGINEGuided learning
Self-paced paths, a trainee handbook and labs that complete from real console actions, so learners build muscle memory on the live range.
LEARN MODE05 · Sectors
The whole energy value chain.
Modelled on Indian critical infrastructure, from the boiler to the meter.
06 · See it live
The range, on screen.
A live OT SOC, ISA-101 process graphics and the national grid, all driven by the same running plant. Click any screen to open it full size.
Bring your team onto the range.
CHAKRAVYUH runs fully on-premise and air-gapped, alongside the Sanraksha family: SANJAY (IT SOC), DRISHTI (VAPT) and the TTX tabletop platform.
Talk to us about exercises, cohorts and deployment.