Cyber Security Training
Cyber Security Training
Beginner-Friendly
On-Demand
Live OT Environment
Lifetime Course Access
30-Day Live Lab
Test a real water treatment plant. Keep the course for life, and get 30 days in a live industrial testbed hosted on-premises at White Knight Labs.
Assess an interconnected IT and OT environment built from three real PLCs, two Active Directory forests, segmented IT and OT networks, HMIs, industrial protocols, and physical process equipment. Start from the IT side and work toward OT, or connect straight to the OT network for focused industrial testing.
Limited enrollment · seats shown live on this page
OTPT is a beginner-friendly, hands-on course for security professionals who want practical experience in OT and ICS penetration testing. Instead of a pile of virtual machines, you get remote access to a physical industrial testbed hosted at White Knight Labs.
The environment models a water treatment process. It combines enterprise infrastructure with real PLCs, HMIs, industrial protocols, segmented networks, tanks, pumps, sensors, and process controls. You learn to assess both sides of a modern industrial plant, from Active Directory to the systems that move water.
Water moves. Pumps activate. Tank levels change. A live camera feed shows the physical environment while you work, so you connect each action on the network to its effect on the process.
Interact with physical industrial controllers that operate different parts of the water treatment process.
Assess enterprise infrastructure and find the attack paths that lead into protected OT systems
Use separate IT and OT VPN access. Work from enterprise toward OT, or connect straight to the OT network.
Real control hardware wired to physical tanks, pumps, sensors, and process equipment.
Watch the physical environment as you work and see the result of your testing in real time.
Work through the course and the hands-on environment at your own pace, on your own schedule.
This outline is pulled live from the course, so it always reflects every module available at the time of purchase. What you see here is what you get on day one.
Curriculum loads here from the course API
Modules are pulled live at page load so the outline always matches what is available at the time of purchase. DEV: set API_ENDPOINT in the curriculum loader script to render live data.
OTPT gives you two common OT testing scenarios through two separate VPNs.
Connect to the IT environment with the IT-side VPN and begin from your own Kali Linux attack VM. Enumerate the network, work through Active Directory, find weaknesses, evaluate segmentation, and discover paths toward the protected OT network.
The goal is to mirror the progression a tester meets when assessing a mature organization.
IT Network
Active Directory
Segmentation
OT Network
HMI
PLC
Physical Process
Take a separate path straight into the OT environment for exercises focused on industrial security. Discover OT assets, analyze industrial communications, assess HMIs, interact with PLCs, and evaluate the controls protecting the process.
Together, the two paths expose you to enterprise-to-OT attacks and direct OT assessment.
OT VPN
Asset Discovery
Protocols
HMI
PLC
Traditional penetration testing ends with a shell, a screenshot, or access to sensitive data. OT systems control physical processes, and OTPT lets you see that difference first-hand. A live camera feed shows the testbed while you complete each exercise.
The OTPT environment is physically hosted at White Knight Labs and purpose-built for hands-on security testing. These components run together as one interconnected plant, not isolated training targets.
Everything runs through the White Knight Labs student portal. Your course content stays yours for good. Your live lab time runs on a 30-day clock.
Buy the course and keep it for life inside the student portal. You also receive content upgrades and new material as the course grows.
The course purchase includes 30 days in the live environment. The clock starts at the time of purchase. Work through every hands-on
The portal delivers two VPN configurations, one for each side of the plant. Each side has its own attack paths. See the two approaches for the full walkthrough.
Start in the enterprise network. Work through Active Directory and segmentation toward one goal: reach the OT environment from the IT side.
Connect straight to a real, live OT network. The hardware is physical, the protocols are real, and your testing moves the actual process.
Students provide their own Kali Linux virtual machine. Your Kali VM is the primary attack system, and it connects to the WKL training environment through the provided VPN access.
You will use your Kali system to:
Previous experience with PLCs, HMIs, SCADA, or water treatment is not required. This is not an intro to cybersecurity, though. You should be comfortable with basic penetration testing, networking, Linux, and Active Directory.
Penetration testers moving into OT
Offensive security consultants
Security engineers
Red team operators
Vulnerability assessment pros
IT security pros entering OT
OT pros exploring offensive testing
Complete OTPT and you receive a White Knight Labs Certificate of Completion for the Operational Technology Penetration Testing course. It recognizes the hands-on work you put in against a live industrial environment.
OTPT · WKL Applied Training
Course access
OTPT
Training track
WKL Applied Training
Difficulty
Beginner-Friendly
Delivery
On-Demand / Self-Paced
Course access
Lifetime (portal)
Lab access
30 days from purchase
Additional lab
Via student portal
Enrollment
Limited availability
Environment
Live water treatment testbed
PLCs
3 real PLCs
Enterprise
2 Active Directory forests
Network access
Separate IT & OT VPNs
Attack system
Student-provided Kali VM
Lab model
Shared physical environment
Environment reset
Nightly
Physical visibility
Live camera feed
Completion
WKL Certificate of Completion
Certification exam
None
Complete OTPT and you receive a White Knight Labs Certificate of Completion for the Operational Technology Penetration Testing course. It recognizes the hands-on work you put in against a live industrial environment.
No. OTPT is fully on-demand and self-paced. You keep the course content for life and get 30 days in the live environment to work through it.
The environment is physically hosted at White Knight Labs. It holds real PLCs, industrial systems, physical water tanks, pumps, sensors, and process equipment. You interact with these systems remotely and watch the physical environment through a live camera feed.
The two VPNs reach two parts of the environment. The IT VPN lets you start from the enterprise side and find attack paths toward OT. The OT VPN gives direct access for exercises focused on industrial systems.
Yes. You provide your own Kali Linux VM. It connects to the training VPNs, runs your tools, establishes access, and completes the hands-on exercises.
No. OTPT is built for students new to OT and ICS penetration testing. You should have some grounding in networking, Kali Linux, command-line tools, Active Directory, and basic penetration testing.
Yes. A live camera feed shows the water treatment testbed so you can watch how your testing affects the physical process.
Yes. Students share the physical OTPT environment. Some exercises need coordinated access so actions against shared equipment do not conflict.
The target environment rebuilds nightly. Detailed environment and reset information ships with the course.
Yes. OTPT uses real industrial hardware and shared physical infrastructure, so enrollment is limited. Current seat availability shows live on this page. If the environment reaches capacity, enrollment closes until more opens up.
You get lifetime access to the OTPT course content in the student portal, plus upgrades and new material as the course grows. The purchase also includes 30 days of live environment access.
Your 30 days of lab access begin at the time of purchase.
You keep full access to the course content in the portal, including upgrades and new material. The live environment closes. You can add more lab time while you still have access, or buy more once a seat opens up if your time has run out.
Yes, through the student portal. Extensions are sold in fixed blocks, for example another 30 days. While you still have lab time left, you can buy a block to add more days. If your time has fully run out, you buy more lab access once a seat becomes available, because the environment is shared and seats are limited.
Support runs through the White Knight Labs community Discord and by email at support@whiteknightlabs.com for billing, labs, content, and vouchers.
Assess a live industrial plant end to end, from the enterprise network down to the PLCs that move water.
Assess industrial systems
Interact with real PLCs
Test HMIs and protocols
Watch the process respond
Limited enrollment · seats shown live on this page
All seats for this training are currently filled, but you can still get in line for the next available spot. Leave your details below, and we’ll notify you as soon as a place becomes available.
