Frequently asked questions
Quick answers about what Range is, what it covers, how scoring works, and how to get access.
What is GraphLattice Range?
A hands-on incident-response simulation, a cyber range. Teams rehearse documented, real-world attacks end to end across identity and the cloud and SaaS those attacks pivot into. You work the incident, you do not just read about it.
What attacks does it cover?
Identity-centric attacks across Active Directory, Entra ID, Microsoft 365, Intune, AWS, Azure, GCP, Okta, and Snowflake, drawn from documented incidents. See the scenario library.
How are scenarios scored?
Decisions are scored on an identity and cloud graph model, the same kind of model used to detect these attacks in production. See how scoring works.
Do I have to connect it to my production environment?
No. You train against self-contained simulations. There is no need to connect Range to your live identity or cloud systems. See platform security.
Can my whole team train together?
Yes. Range supports solo, team, and presenter modes. See team and presenter modes.
Do I get a certificate?
Yes. Completing scenarios earns enterprise-class certificates with credential identifiers and competency badges. See certificates and badges.
How do scenarios stay current?
New scenarios are drafted from live threat intelligence and published after expert review, so the library tracks what is actually being exploited.
How do I get access?
Range is in early access. Request access and we will set up a guided session. For pricing or a tailored quote, request access and our team will follow up.
Where can I learn more about a specific attack?
The blog has practitioner writeups of many of the scenarios, and the glossary defines the key terms.