Self-paced skill development
Build targets locally for certification prep or routine practice, without sourcing images or repairing broken environments.
Intentionally vulnerable targets, provisioned on infrastructure you control.
weakr deploys realistic misconfigurations and vulnerable services onto Linux and Windows virtual machines. Spin up a target, work it from your attack host, tear it down.
Pricing.
Three tiers, available at launch. Training providers, enterprises and vendors: contact us now.
Launching soon.
Designed to be exploited. Engineered to stay contained.
A deliberately weakened host is only useful if it stays where you put it. Isolation and integrity are built into the client, not left to the operator.
runtimeDisposable by design
Each deployment targets a fresh, snapshotted guest. Revert after the lab and the next one starts from a clean baseline.
networkEgress kill-switch
Outbound WAN traffic is dropped for the lifetime of the lab while LAN reachability is preserved for your attack host. The rule set persists across reboots.
integritySigned scenario delivery
Scenario definitions are Ed25519-signed and retrieved over certificate-pinned TLS. What gets deployed is exactly what was published.
guidanceProgressive hints
Reveal hints one at a time, or open a full walkthrough with commands templated against your target's address.
lifecycleReboot-aware provisioning
Scenarios that require a restart resume automatically. The lab slot is held until you explicitly terminate it.
targetsLinux and Windows
Coverage across both platforms, with OS and kernel requirements validated before anything is applied.
Use cases.
Learning, teaching, hardening or selling: each one depends on realistic weaknesses that can be reproduced on demand.
Reproducible classroom labs
Deliver identical environments to every trainee, with hints and walkthroughs ready for debriefs.
Internal team enablement
Give SOC, blue and red team staff hands-on exposure to real misconfigurations, inside your own segmented environment.
Demonstrations and PoCs
Validate detection coverage and run pre-sales demonstrations against reproducible, known-vulnerable hosts.
FAQ.
Anything else: contact us.
What is blind mode?
A scenario is selected and deployed without being disclosed. Enumeration starts from zero, as it would on a real engagement. It is available on every tier; w2 and w3 additionally let you choose the scenario.
Is weakr a hosted service?
No. weakr is licensed software. Targets are built on virtual machines you operate, whether on a workstation, a lab server or corporate infrastructure.
What are the requirements?
A hypervisor, a clean Linux or Windows guest for the target, and an attack host on the same network segment. Snapshot the guest before each deployment so it can be reverted afterwards.
Does an active lab have internet access?
No. While a lab is active, outbound WAN traffic is blocked and only the local network remains reachable. The rule persists across reboots until the lab is terminated.
What is permitted use?
Training, education, research and demonstrations, in environments you own or are authorised to test. weakr is not intended for use against third-party systems.
Contact.
Licensing, training-provider deployments, vendor demonstrations or technical questions.
contact@getweakr.com