Dataset · September 2026

Exercise matrix 2026: who each security training platform trains

Field note

Seven of eight platforms sell a tabletop or crisis simulation for the incident response team, which makes it the most crowded cell in the category. Only Cyberbit and Immersive Labs offer a live-fire range. Only Conducttr publishes a full price list; Hack The Box publishes one business plan; four scored vendors publish no price at all.

Editorial assessment · Assessed from vendor sites, product pages and published pricing, September 2026

10-1The matrix

Executives and board

Tabletop and crisis simulation: Reflex Security Immersive Labs Hack The Box Cyberbit iluminr ConducttrCISA CTEP *
Live-fire range: No platform in this set
Hands-on labs: No platform in this set
Awareness training: No platform in this set

Incident response team (cross-functional)

Tabletop and crisis simulation: Reflex Security Immersive Labs Hack The Box Cyberbit TryHackMe iluminr ConducttrCISA CTEP *
Live-fire range: Immersive Labs Cyberbit
Hands-on labs: No platform in this set
Awareness training: No platform in this set

SOC analysts

Tabletop and crisis simulation: No platform in this set
Live-fire range: Immersive Labs Cyberbit
Hands-on labs: Immersive Labs Hack The Box Cyberbit TryHackMe
Awareness training: No platform in this set

Whole company

Tabletop and crisis simulation: iluminr
Live-fire range: No platform in this set
Hands-on labs: Immersive Labs
Awareness training: KnowBe4

* CISA CTEP = CISA Tabletop Exercise Packages, free templates, not a platform. Shown as the free baseline.

Figure 1. Where each platform documents a product, September 2026. A chip means the vendor sells that format for that audience on its public pages. It says nothing about quality; the scores do that.

The matrix as a table: formats each platform documents, by audience
Platform	Executives and board	Incident response team	SOC analysts	Whole company
Reflex Security	Tabletop and crisis simulation	Tabletop and crisis simulation	None	None
Immersive Labs	Tabletop and crisis simulation	Tabletop and crisis simulation; Live-fire range	Live-fire range; Hands-on labs	Hands-on labs
Hack The Box	Tabletop and crisis simulation	Tabletop and crisis simulation	Hands-on labs	None
Cyberbit	Tabletop and crisis simulation	Tabletop and crisis simulation; Live-fire range	Live-fire range; Hands-on labs	None
TryHackMe	None	Tabletop and crisis simulation	Hands-on labs	None
iluminr	Tabletop and crisis simulation	Tabletop and crisis simulation	None	Tabletop and crisis simulation
Conducttr	Tabletop and crisis simulation	Tabletop and crisis simulation	None	None
KnowBe4	None	None	None	Awareness training
CISA CTEP	Tabletop and crisis simulation	Tabletop and crisis simulation	None	None

Download the matrix as CSV

10-2What does the matrix show?

Tabletop and crisis simulation for the IR team is offered by seven of the eight platforms, plus CISA's free packages. Differentiation there comes from realism, who can take part and what evidence comes out.
Live-fire range work for SOC and IR teams is offered by two: Cyberbit and Immersive Labs.
Immersive Labs and Cyberbit are the only platforms in three formats (tabletop, range, labs). Immersive also reaches the wider workforce; Cyberbit does not.
Awareness training for the whole company sits with a different kind of vendor (KnowBe4 here).

10-3Who publishes prices? The price disclosure census

Platform	Published price	What is priced	Source
Conducttr	Yes, full list	Four team licences £11,950–£25,725 per year; Assessment Toolkit from £4,536 per year	conducttr.com/pricing
Hack The Box	Partial	Professional $2,500 per seat per year ($250 per month); Lite, Base, Ultimate and Crisis Control not priced	hackthebox.com/business/pricing
TryHackMe	Partial	Individual plans and free tier; business plans not priced	tryhackme.com/pricing
Reflex Security	No	Nothing published	reflexsecurity.io
Immersive Labs	No	Nothing published	immersivelabs.com
Cyberbit	No	Nothing published; Crisis Sim 360 add-on only	cyberbit.com/product/crisis-simulation
iluminr	No	Nothing published	iluminr.io/pricing
KnowBe4	Not on the pages we reviewed	Not published on the homepage	knowbe4.com

Price disclosure as of September 2026, from each vendor's public pages. 'Partial' means at least one plan a business can buy has a list price.

10-4How was this built?

Each placement records a product the vendor documents on its public site for that audience and format, with the page it came from. A placement is not an endorsement or a score. Vendors can send corrections with a public source to editors@securitytraining.co.

10-5Frequently asked questions

Which cyber exercise vendors publish their prices?

Conducttr publishes a full list, Hack The Box publishes its Professional plan, and TryHackMe publishes individual plans. Reflex Security, Immersive Labs, Cyberbit and iluminr publish none.

Can I use this data?

Yes, with attribution to Security Training (securitytraining.co) and the review date, September 2026.

Sources: conducttr.com/pricing, hackthebox.com/business/pricing, tryhackme.com/pricing, reflexsecurity.io, immersivelabs.com, cyberbit.com/product/crisis-simulation, iluminr.io/pricing, knowbe4.com · Reviewed Sep 2026