Train-to-Operate (T2O)
Cyber readiness you can prove.
ForceGen develops and trains cyber operators through realistic missions and measures their readiness against the requirements of their role: in the cloud, on your own infrastructure or fully disconnected.
Q-RANGE
Turn practice into capability.
Mission scenarios, labs and evidence connected in one environment.
Explore a missionPCT ONTOLOGY
Readiness you can prove.
Every readiness indicator is connected to the missions, tasks and evidence that support it.
How we measure readinessFORCEGEN ON-PREMISE
Your infrastructure. Your rules.
The complete platform inside your own network, even without an internet connection.
Explore deploymentReference frameworks
CSF 2.0Cybersecurity risk management: the six functions of the framework
Cyber workforce: work roles, tasks, knowledge and skills- DoD 8140 · DCWFDoD 8140 / DCWF: Cyber workforce: DoD Cyber Workforce Framework work roles
Threat scenarios mapped to MITRE ATT&CK tactics and techniques
Reference frameworks
- NIST CSF 2.0
Cybersecurity risk management: the six functions of the framework
- NICE Framework
Cyber workforce: work roles, tasks, knowledge and skills
- DoD 8140 / DCWF
Cyber workforce: DoD Cyber Workforce Framework work roles
- MITRE ATT&CK Enterprise
Threat scenarios mapped to MITRE ATT&CK tactics and techniques
01 / THE APPROACH
Readiness is built. Mission by mission.
Traditional training records what a person completed. ForceGen shows what they can actually do: it connects learning, practice and operator evidence in a continuous cycle.
02 / THE PLATFORM
A complete cycle. An evolving capability.
Each cycle starts from the evidence of the last one. Q-Sensus supports the identification of what to strengthen next and recommends new activities, under instructor supervision.
Explore all modulesLearn
Q-Camp learning pathways by work role, task and K/S/A; missions authored in Q-Trainer.
Train
TTX, CTF, STX and FMX exercises in Q-Range, with live arenas, Q-Arsenal tools and Q-Market resources.
Assess
Q-Score shows each mission’s results and live ranking; Q-Insight shows the demonstrated readiness of every operator, team and unit by work role.
Improve
Q-Insight prioritizes gaps and generates reinforcement plans; Q-Sensus recommends the next activities under instructor supervision.
03 / FROM SCENARIO TO EVIDENCE
This is what a mission looks like.
The instructor publishes the scenario, each operator works in their own lab, and the evidence of what they do feeds their readiness by role.
Operation / STX-214
Ransomware on an isolated network
Role readiness
Cyber Defense AnalystDCWF 511 · Q-Insight62%68%
Mission
A host on segment 10.20.4.0/24 is encrypting shared drives. Find it, isolate it and leave evidence.
- Capture SMB traffic on the segment
- Identify the host encrypting files
- Isolate the host and validate the flag
- Document the evidence
Evidence from this mission
K0058Network traffic analysis methods · K0058S0156Packet-level analysis · S0156T0166Event correlation · T0166
Flag validatedUnique to operator-11 · +150 XP
Capture SMB traffic on the segment64%
operator-11@q-lab:~$
sudo tcpdump -nn -i eth0 net 10.20.4.0/24 and port 445 -w smb.pcaplistening on eth0, link-type EN10MB (Ethernet) 4812 packets captured
Identify the host encrypting files66%
operator-11@q-lab:~$
zeek -r smb.pcap && zeek-cut id.orig_h name < smb_files.log | grep '\.locked$' | sort | uniq -c312 10.20.4.17Isolate the host and validate the flag68%
operator-11@q-lab:~$
sudo iptables -I FORWARD -s 10.20.4.17 -j DROP && sudo iptables -L FORWARD -n | head -3Chain FORWARD (policy ACCEPT) target prot opt source destination DROP all -- 10.20.4.17 0.0.0.0/0
STX-214 · Ransomware on an isolated network
Chart of a Q-Range mission
Ransomware on an isolated network. The attacker gets in through the DMZ and encrypts shared resources from host 10.20.4.17. From the SOC, operators capture the SMB traffic, identify the host, isolate it and validate the flag in 14 minutes and 32 seconds.
10.20.4.17
iptables -j DROPfs-01312 .locked filestcpdump · SMB 445Flag validated · +150 XP
DMZ / CORP / SOC
external origin
DMZ10.20.1.0/24
CORP10.20.4.0/24
- .11
- .12
- .13
- .16
- .18
- .21
- .22
- .17
- fs-01
SOC10.20.9.0/24
- Friendly
- Hostile
- Evidence
- T+00:00
Scenario published
- T+03:10
Traffic captured
- T+07:45
Host identified
- T+11:20
Host isolated
- T+14:32
Flag validated
Demonstration scenarioIllustrative simulation. The data shown does not represent a real operation.
04 / SOVEREIGN BY DESIGN
On your network. Offline.
ForceGen can be deployed on the organization’s own infrastructure and operate on isolated networks, keeping training environments, content and operational records local.
See the on-premise architectureA Q-Mission server inside the customer’s network hosts labs, content, local AI and data. Users connect over the internal IP. The internet link is optional and can be cut without affecting training.
your Ubuntu server
https://10.x.x.xLocal services
- Labs
preloaded images
- Content
slides as PDF
- Local AI
on GPU, or switched off
Everything inside your network
Labs, content, local AI and operational records on your server. Users connect through the internal IP.
Installs without internet
The kit arrives on USB or by download, and no installation step needs a connection.
You decide when to update
New missions with the same data, backups and rollback with a single command.
05 / WHERE OPERATIONAL CAPABILITY MATTERS
Cyber readiness for organizations where operational capability matters.
06 / THE NEXT STEP
Let's talk about what your organization needs.
Tell us which capability your organization needs. A specialist will set up a discovery session with you under NDA.
What happens next
- Reply within 48 business hours.
- We sign a non-disclosure agreement before you share details about your environment.
- A technical briefing built on a scenario from your sector, and a concrete pilot proposal.
contacto@qmission.netEncrypted channel and PGP available on request
Q-Range › Operation › STX-214