LetsDefend
Blue team training platform where learners investigate cyber attacks inside a simulated SOC.
Technical Architecture & Overview
LetsDefend places learners in a simulated security operations center where they investigate cyber attacks, alongside browser-based labs and challenges that need no local tools. Learning paths cover SOC analyst, incident responder, DFIR, malware analysis, and SIEM engineer roles, content is mapped to MITRE ATT&CK, and a free Basic plan provides access to starter content. Hack The Box announced its acquisition of LetsDefend in September 2025, so branding and platform integration may change over time.
Targeted Technical Use Cases
Blue team learners who want alert triage practice that mirrors real SOC workflows.
Evaluation & Trade-offs
Core Strengths
- +Simulated SOC environment for investigating cyber attacks.
- +Browser-based labs with no tools to download or install.
- +Role-based learning paths.
Trade-Offs & Limitations
- -Paid VIP plans are needed beyond Basic access.
- -Ownership transition may change access or pricing.
Defensive Security Application
Training analysts in alert triage and investigation.
Frequently Asked Questions
What is LetsDefend?→
LetsDefend places learners in a simulated security operations center where they investigate cyber attacks, alongside browser-based labs and challenges that need no local tools. Learning paths cover SOC analyst, incident responder, DFIR, malware analysis, and SIEM engineer roles, content is mapped to MITRE ATT&CK, and a free Basic plan provides access to starter content. Hack The Box announced its acquisition of LetsDefend in September 2025, so branding and platform integration may change over time.
What is LetsDefend used for?→
Blue team learners who want alert triage practice that mirrors real SOC workflows.
What are the strengths of LetsDefend?→
- +Simulated SOC environment for investigating cyber attacks.
- +Browser-based labs with no tools to download or install.
- +Role-based learning paths.
What are the limitations of LetsDefend?→
- +Paid VIP plans are needed beyond Basic access.
- +Ownership transition may change access or pricing.
How is LetsDefend used defensively?→
Training analysts in alert triage and investigation.