The platform
ForceGen develops, trains, assesses and strengthens cyber readiness through an integrated environment of missions, labs and capability measurement.
ForceGen is not a circle but a spiral: each cycle starts from the evidence of the last one, so the operator returns to the same phase with more demonstrated readiness.
Entry point to the Learn module.
Mission-aligned pathways by Q-Role: Q-Coordinator, Q-Investigator and the rest, with sections, students and hours. The operator sees enrollments, certificates, completed missions and points.
The same view filtered to the DoD Cyber Workforce Framework.
Every pathway carries its work role code (DCWF 652 Security Architect, 751 Cyber Workforce Developer and Manager, 511 Cyber Defense Analyst) with its sections, students and duration, Q-Lab and Q-Check activity, and the operator’s real progress on each profile.
Authoring studio and operational control.
Every mission moves through a cycle: preparation, live operation, people and results. Mission Studio builds sections and chapters, and My Missions is the full catalog by type (course, custom, DCWF), level (basic, intermediate, advanced) and status. This is where missions are created, published and monitored live.
Develop, practice and validate operational capability.
Six paths: continue preparation based on active gaps, train a work role, drill a specific capability, compete in a live arena, browse exercises, or build your own scenario in Q-Builder.
The exercise catalog, ordered by operational capability.
The orchestrator offers the four exercise types (TTX, CTF, STX and FMX) and every exercise declares which work role it validates, which techniques it covers and its PCT trace, with the points at stake and each operator’s status.
The same library filtered by capability.
The tags are not invented categories: they come from the ontology (DCWF work roles, NIST CSF 2.0 functions, ATT&CK techniques), so filtering by a capability returns exactly the exercises that train it.
A tabletop exercise as a map.
The cyber operator at the study desk, the external Q-Viewers watching, the target lab (here, a banking payments ecosystem with SWIFT, EMV, POS and ATMs) and the evidence-and-controls node. 45-minute timer and live activity.
Tools and capabilities available to the exercise.
345 resources and 119 work roles classified by DCWF and NICE in Q-Arsenal, direct provisioning from Q-Market, multi-tier operational spaces and live operations in Q-Range.
Active environment management.
List, map and topology of the same exercise. In the topology every zone (internet-facing surface, analyst workbench, target organization and monitoring) shows the resources actually running; opening a node reveals its sessions, network, activity and direct access to the tool.
AWS Marketplace resources organized by operational mission.
Available budget, seven capability categories and a catalog of solutions (Kali Linux and others) ready to deploy into Q-Range.
Readiness oversight for the organization’s leadership.
Available only to the governance role. One filter (partner, mission and population) applies to every tab: readiness state, gaps and priorities, roles and capabilities, force and organization, evidence and validation, and the ForceGen Ontology. From there, leaders request a new analysis of a person, unit or team.
Organizational intelligence on the map.
Organizational nodes, locations and operators with their validation state (validated, restricted, priority gap, critical gap, insufficient evidence), to read readiness by geography and by unit in the Force view.
The PCT Ontology, browsable.
The Cyber Defense Analyst work role unfolded into its 34 tasks, 70 knowledge items and 16 skills and abilities, with four metrics that are never combined: coverage, exposure, evidence and readiness. Alongside, the 242 real connected relationships.
Performance by mission, updated live.
The operator’s scoreboard with position and XP, what to reinforce, a live ranking by operator and by team, the log of every solved operation with time, accuracy, attempts and XP, and analytics in bars, pie and a five-axis radar.
Gaps prioritized by missing capability.
An illustrative cohort of 60 operators: 41 consolidated, 9 partial, 6 priority and 4 critical. Each gap shows its impact, reference frameworks, affected operators and evidence level.
Where the instructor and the operator decide.
Six actions over one operational capability: continue an open preparation, train a work role, practice a single task, skill or ability, compete in a live arena, browse the catalog or build a scenario. From there it moves on to the Capability Explorer and My Readiness.
A capability opened up.
The work role unfolds into its real tasks and K/S/A (40 tasks, 58 knowledge items, 17 skills and 18 abilities for All-Source Analyst) alongside the operator’s accuracy on that profile. From here a scenario can be built to fit the gap.
Q-Sensus helps identify gaps and recommends the next activities, always under instructor supervision. Readiness is never taken for granted.
The instructor publishes the scenario, every operator works in their own environment and a unique flag validates the result.
Underneath ForceGen there is no matrix and no list of framework equivalences: there is a model that defines what each person, role, task, capability and piece of evidence is, and what every relationship between them means. That is why the platform can derive readiness, not just classify.
Person performs Role. Role requires Task. Task requires K / S / A. Mission exercises Task. Mission runs as Operation. Operation produces Evidence. Evidence demonstrates Task. Task contributes to Readiness. Readiness informs Person.
What the model derives
Nothing is duplicated. Every ForceGen function is a projection of the same model.
Q-Role × DCWF × NICE × Tasks × K/S/A × NIST CSF × ATT&CK. The tabular view for framework alignment and interoperability.
Each operator’s readiness by role. This is what Q-Insight shows the instructor and the decision-maker.
Per-person gaps turned into a proposed training path. This is what Q-Sensus uses to recommend the next activities, under instructor supervision.
In the platform, the Cyber Defense Analyst work role (DCWF) unfolds into its tasks and K/S/A with 242 connected relationships.Read the full PCT Ontology
Q-ROLES® / THE FORCEGEN MODEL
Six operational roles that reproduce the functions of a real team, organized around the NIST CSF 2.0 functions as a reference. Every role has its pathway in Q-Camp and its mission in Q-Range.
Select a function to explore its Q-Role.
Associated Q-Role
GV / GOVERNQ-Coordinador
Leadership, risk governance, strategy and continuity. The leader who orchestrates cybersecurity.
Cybersecurity strategy, expectations and policy.
Associated Q-Role
ID / IDENTIFYQ-Cazador
Vulnerability assessment, pentesting and offensive Python. Finds the flaw before the adversary does.
Understand current cybersecurity risks.
Associated Q-Role
PR / PROTECTQ-Asegurador
System and network hardening, controls and vulnerability management. Shrinks the attack surface.
Safeguards to manage cybersecurity risks.
Associated Q-Role
DE / DETECTQ-Monitoreador
Continuous monitoring, SIEM, event correlation and detection rules. Turns noise into signal.
Find and analyze possible attacks and compromises.
Associated Q-Role
RS / RESPONDQ-Analista
Incident response, digital forensics and malware analysis. Contains and resolves the incident.
Act on detected cybersecurity incidents.
Associated Q-Role
RC / RECOVERQ-Investigador
Threat intelligence, OSINT and OPSEC, cutting across the whole framework. Anticipates the next threat.
Restore affected assets and operations.
Six functions addressed concurrently.
Explore NIST CSF 2.0(opens in a new tab)Q-Sensus compares what each operator’s role requires with what they have demonstrated, and recommends what comes next. Instructors review and approve before anything reaches the operator.
Learn
Drafts pathways, missions and questions from each operator’s work role, gaps and pace, for the instructor to review.
Train
Adaptive feedback during each exercise, not after it.
Assess
Every mission and every Q-Range operation produces new evidence, and Q-Sensus recommends what to strengthen next, pending human approval.
Q-MiAnswers with your profile’s dataThe Q-Sensus assistant inside the platform. It answers with the profile’s real data: points, accuracy, completed operations, consistency, persistence and improvement, and recommends the next step.
Show my profile points, accuracy and operations
You have 2,340 points, 87% accuracy and 14 completed operations. Your consistency rose 12% over the last month and your biggest improvement is in detection.
Which gap should I close first for my work role?
Your biggest gap is containment (58%). Closing it raises your Cyber Defense Analyst readiness more than anything else.
Recommendation: STX · Scenario DFIR-03 in Q-RangeStart
Suggest my next STX in Q-Range
Suggested: STX DFIR-03 in Q-Range with your own lab, 45 minutes of containment and forensic analysis. It starts once your instructor approves it.
Recommendation: STX · Scenario DFIR-03 in Q-RangeStart
Q-Score and Q-Insight turn operational evidence into decisions: each operator’s readiness by work role, and the Force view for units.
Q-Insight › Readiness by roleRequired level · 70%
Q-Insight measures each operator’s readiness against required capabilities, demonstrated performance and evidence validity and freshness, not course progress.
Performance by mission: position and XP, accuracy, attempts, a live ranking by operator and by team, and five-axis analytics.
Readiness by person, team and unit: gaps and priorities, evidence and validation, and reinforcement plans generated from the gaps detected.
One cycle to learn, train, assess and improve. And it adapts to you: your doctrine, your network and your sector.
Your institution’s know-how becomes its own missions, with AI that speeds up the work and full control over who did what.
Q-Trainer and Q-Builder let you create and adapt missions, chapters and questions, with AI assistance to go from draft to ready-to-run exercise.
Q-BuilderQ-IAgentWhat exercise do you want to build today?
Pick the work role and describe the exercise in your own words. Q-IAgent drafts it from the team’s gaps; you approve each part.
Work role511 · Cyber Defense Analyst
E.g. an incident-response CTF for new SOC analysts, medium difficulty, focused on detecting exfiltration
Q-IAgent proposal
ForceGen runs in the cloud. If your network can’t reach the internet, the on-premise edition installs everything on your own server and keeps working offline.
01 / Deployment modelYour network, your server
A Q-Mission server inside the customer’s network hosts labs, content, local AI and data. Users connect over the internal IP. The internet link is optional and can be cut without affecting training.
your Ubuntu server
https://10.x.x.xLocal services
preloaded images
slides as PDF
on GPU, or switched off
Air-gapped. Labs, content, AI and data keep running inside your network.
$ tar -xzf qmission-org-<release>.tar.gz && cd qmission-org $ sudo ./install.sh --offline 1. Checking the server 2. Installation details 3. Verifying the artifacts 7. Deploying the platform 8. Applying the kit (missions, organization, license) 9. Checking that it really works Note: with no internet, the license is requested from Q-Mission with a request code. $ sudo qmission license import license $ sudo qmission verify ✓ OPERATIONAL # Day to day $ sudo qmission update # new missions, same data $ sudo qmission backup $ sudo qmission rollback
Illustrative, abridged installer sequence. The kit arrives on USB or by download and no step needs internet.
A walkthrough of the platform, from the mission to the decision.
The video is loaded from YouTube only when you press play.
Built for institutions that must be able to show, with evidence, what their teams can do. Pick your sector and see a typical scenario.
Defense
Armed forces, joint commands and national cyber commands train on closed networks, with their own content and measurement based on DCWF work roles.
Scenario components
On-premise install on the school’s network, no internet.
Work-role missions with a lab for every cadet.
Final assessment in Q-CTF with unique flags.
Readiness report by operator and by role.
Government
CSIRTs, ministries and national security agencies train their teams and report readiness in a common competency language.
Scenario components
Readiness baseline by role.
Mission paths based on the gaps found.
Group exercises run from Range Control.
Continuous tracking in Q-Insight.
Financial services
Central banks, supervisors and regulated entities prepare their teams with sector scenarios and evidence of what each team can do.
Scenario components
Scenario with SWIFT, EMV, POS and ATMs.
Detection and response teams working in parallel.
Evidence by task and by person.
Readiness evidence by operator and by role for the risk committee.
Critical infrastructure
Energy, telecom, transport, water and strategic sectors train industrial security on a digital twin, with no risk to operations.
Scenario components
Digital twin with industrial protocols such as Modbus.
Detection and response drills in an industrial setting.
Install inside the OT network if required.
Role-based measurement for IT and OT teams.
Education and academia
Universities and official cyber defense programs add live labs, challenges and competency measurement to their courses.
Scenario components
Missions built by faculty in Q-Trainer.
A lab per student, in the browser.
Q-CTF competitions between groups.
Grading backed by competency evidence.
Validate ForceGen with a real group before rolling it out across the organization.
We define the roles to train, the starting level and the deployment: cloud or on-premise.
One working sessionA group trains with real missions and labs. We measure each operator’s readiness at the start and at the end.
Readiness report at start and finishWe scale to more teams, add your own content and train your instructors.
In stages, keeping progressWe reply with a concrete proposal within 48 business hours.
ForceGen is a Cyber Force Generation System, not just a cyber range or a course platform. Your teams don’t watch classes: they solve missions in real labs, every operator in their own. Each result is validated with a unique flag and becomes evidence, so you can see who is ready for each role and who is not yet.
For organizations that need a cyber force that is truly ready: armed forces and cyber commands, government and CSIRTs, financial services, critical infrastructure with OT, and academia.
With the PCT Ontology: each mission exercises tasks of a NICE or DCWF work role, the evidence shows which tasks were performed and how well, and that yields readiness by operator and by role, along with the gaps.
It assists instructors and operators: it helps generate content, offers coaching during exercises and recommends the next activities from each operator’s gaps. Nothing reaches the operator without human approval. Its assistant, Q-Mi, answers with the profile’s real data.
Yes. With Q-Trainer and Q-Builder your instructors create and adapt missions, chapters and questions with AI assistance, aligned to your doctrine, your roles and your national frameworks.
Your choice. The cloud edition runs in the browser. The on-premise edition installs on your own Ubuntu server, runs even offline, and users, progress and results never leave your network. Updates, backups and rollbacks take one command.
It depends on the edition. In the cloud, AI features use an external provider and can be switched off. In the on-premise edition, AI runs on your server with a local model or is turned off, and in air-gapped mode the platform refuses to start if an external AI is configured.
With a pilot: we define the roles to train and the deployment, a real group trains with missions and labs, and we measure each operator’s readiness at the start and at the end before any rollout.
The next step
Let's explore how ForceGen fits your organization's cyber readiness needs.
Request a technical briefing Back to top