Cyber Security Training
Cyber Security Training
Learn how to conduct penetration tests against Operational Technology (OT) and Industrial Control System (ICS) environments through hands-on access to a live water treatment testbed hosted on-premises at White Knight Labs.
OTPT gives students 30 days to assess an interconnected IT and OT environment featuring three real PLCs, two Active Directory forests, segmented IT and OT networks, HMIs, industrial protocols, and physical process equipment.
Students can begin from the IT network and work toward the OT environment, simulating the attack paths encountered during real-world assessments, or connect directly to the OT network for focused industrial security testing.
A live camera feed provides visibility into the physical water treatment environment throughout the course.
OTPT is a beginner-friendly, hands-on course designed for security professionals who want practical experience performing OT and ICS penetration testing.
Unlike training environments built entirely around virtual systems, OTPT provides remote access to a physical industrial testbed hosted at White Knight Labs.
The environment represents a water treatment process and combines enterprise infrastructure with real PLCs, HMIs, industrial protocols, segmented networks, water tanks, pumps, sensors, and process controls.
Students learn how to assess both sides of a modern industrial environment, from enterprise infrastructure and Active Directory to the systems responsible for controlling the physical process.
OTPT introduces students to the technologies, methodology, and considerations involved in conducting an OT penetration test.
Topics include:
A detailed course curriculum and module breakdown will be available as the course approaches release.
Traditional penetration testing often ends with a shell, screenshot, or access to sensitive information.
OT systems control physical processes.
OTPT allows students to see that difference firsthand.
A live camera feed provides visibility into the water treatment testbed while students complete hands-on exercises.
Depending on the exercise, students may observe:
Students can connect actions performed on a network directly to their effect on a physical process.
Network → Control System → PLC → Physical Process
The OTPT environment is physically hosted at White Knight Labs and purpose-built for hands-on security testing.
Students interact with:
These components operate together as an interconnected industrial environment rather than isolated training targets.
The course is on-demand. The OT environment is live.
Students are required to provide their own Kali Linux virtual machine for the course.
The student-controlled Kali VM serves as the primary attack system and is used to connect to the WKL training environment through the provided VPN access.
Students will use their Kali system for activities such as:
Completion demonstrates the ability to:
OTPT is completely on-demand.
There are no scheduled instructor-led classes. Students receive 30 days of course and lab access and progress through the material on their own schedule.
The OTPT environment contains shared physical industrial infrastructure. Certain exercises may require coordinated access to prevent multiple students from interacting with the same physical process simultaneously.
Instructions for coordinating access and using the shared environment will be provided to students with the course.
The target environment is rebuilt nightly to provide a fresh starting point for continued testing.
Additional lab access can be purchased if more time is needed.
Difficulty: Beginner-Friendly
OTPT is designed for students who are new to OT penetration testing.
Previous experience with PLCs, HMIs, SCADA, industrial automation, industrial protocols, or water treatment systems is not required.
This is not an introduction to cybersecurity, however. Students should have some familiarity with basic penetration testing, networking, Linux, and Active Directory.
The exercises are designed to remain approachable while introducing students to technologies they may not have encountered during traditional IT penetration testing.
OTPT gives students experience with two common OT penetration testing scenarios.
IT-to-OT Penetration Testing
Students connect to the IT environment using the IT-side VPN and begin the assessment from their own Kali Linux attack VM.
From there, students enumerate the environment, assess systems and services, work through Active Directory, identify weaknesses, evaluate segmentation, and discover paths toward the protected OT network.
The objective is to simulate the progression a penetration tester may encounter when assessing a mature organization.
IT Network → Active Directory → Network Segmentation → OT Network → HMI → PLC → Physical Process
Direct OT Penetration Testing
Students also receive a separate path into the OT environment for exercises focused specifically on industrial security testing.
From this perspective, students can discover OT assets, analyze industrial communications, assess HMIs, interact with PLCs, identify misconfigurations, and evaluate the security controls protecting the industrial process.
Together, these environments expose students to both enterprise-to-OT attack paths and direct OT assessment techniques.
Students should be familiar with:
Students will also need:
Previous OT or ICS experience is not required.
OTPT is designed for:
OTPT uses real industrial hardware and physical process equipment hosted on-premises at White Knight Labs.
Because students interact with shared physical infrastructure, enrollment is limited.
Current seat availability is displayed in real time on the course page.
$1,200 Per Seat
When seats are available, students can purchase OTPT access directly from this page.
If the training environment reaches capacity, enrollment will temporarily close until additional capacity becomes available.
Students who complete OTPT receive a White Knight Labs Certificate of Completion recognizing successful completion of the Operational Technology Penetration Testing course.
OTPT is part of WKL Applied Training and does not include a White Knight Labs certification exam.
OTPT is part of WKL Applied Training, a training track built around complete security courses, specialized environments, real systems, and hands-on technical testing.
Applied Training courses focus on practical skill development without requiring a professional certification exam.
For OTPT, that means working directly with:
Real PLCs. Real enterprise infrastructure. Real industrial protocols. Real physical processes.
Start from IT. | Find the path into OT. | Assess industrial systems. | Interact with real PLCs. | Test HMIs and industrial protocols. | Watch the physical process respond.
WKL Applied Training
Beginner-Friendly | On-Demand | 30-Day Access | Live OT Environment
