Platform Updates

Programs

Programs are automated sequences of connected content, able to automatically stream Learners using Adaptive Assessments into learning pathways customised to their ability.

Managers can deploy much more flexible, customised learning paths via individual Labs, groups of Labs, Assessments, mixing and matching Immersive’s industry-leading Lab content to find the right mix for their Learners.

We have 12 ready-to-go Programs, aligned to strategic outcomes, and we can create custom Programs in consultation with your CSM or CRA.

Our ready-to-go Programs are as follows:

Prove Faster Detection, Response & Decision-Making

• SOC Analyst (Elastic)

• SOC Analyst (Splunk)

• Incident Response

Secure the Next-Gen Modern Enterprise (Code, Cloud, OT, Identities)

• AWS Cloud Security Engineer

• Secure Developer

Build & Retain a Verifiable Cyber Ready Workforce

• Cyber Generalist

• Penetration Tester

Enable Secure AI Adoption, Innovation & Governance

• AI Generalist

Key New Capabilities

Over and above the new curated pathways, the operational view of Programs has been built for Managers, to help them keep an eye on progress, and to easily intervene.

• Step-based flow: Managers can easily see where users are getting stuck by digging into step-by-step detail

• Automation: Use Adaptive Assessments to automatically stream a group of users into learning paths appropriate for their skill level

• Easy intervention: Managers can message specific users, or groups of users, directly in the platform, to offer help, or to congratulate them for their speedy completion

New language support: French Canadian (Français canadien)

French Canadian (fr-CA) is now available across the Immersive One platform, enabling end-users and administrators to experience core UI elements, notifications.

Crisis Sim Scenarios: Permission and UI uplift

Take back control of your scenario catalogue. We had feedback that Crisis Sim Managers were accidentally editing, publishing, or deleting each other’s drafts.

We’ve added a new permission, ‘Crisis Sim Scenario Creator’, which, when assigned, grants a user permission to create new Crisis Sim Scenarios, but only allows them to view, edit, publish, and delete their own drafts.

Crisis Sim Managers will remain the same, with permission to view, edit, publish, and delete any and all draft scenarios, but will now be able to view the author, so they can tell their drafts apart from everyone else's.

Read more about Permissions in our Help Center, here.

New Content

Product: Immersive Labs

OWASP Top 10 (2025)

We are thrilled to introduce our newest comprehensive content collection dedicated to the 2025 OWASP Top 10. As industry standards evolve, so must your defense strategies. This update ensures your team is equipped with the most current application security training available, empowering them to defend against the latest real-world threats.

By aligning our platform with the newly released 2025 list, we are ensuring your security programs remain compliant, relevant, and effective. This release serves as a foundational update to our Application Security training, replacing the 2021 standards to keep your organization on the cutting edge of cyber defense.

What does the content include?

New 2025 OWASP Collection: A brand-new, comprehensive set of training modules specifically designed around the 2025 OWASP Top 10 vulnerabilities.

Who is this content for?

• Application Security Teams looking to update their threat models and defense strategies.

• Developers and Engineers who need to stay compliant with the latest industry standards.

• Security Managers seeking to maintain competitive parity and ensure their teams are trained on the most up-to-date vulnerabilities.

   

Building with AI: Codex CLI

This collection of seven labs uses a brand-new lab capability - real OpenAI Models LLMs inside lab environment. This collection adds another logo to our growing list of vendor tech: OpenAIs Codex CLI. In an industry first, these labs are the only environment out there that provides one-click access to Codex CLI in a safe sandbox, allowing our customers to focus on their upskilling. This collection is available to Immersive Labs and Immersive Application Security customers, who have not opted out of AI content.

Why is this critical for you and your team?
Our customers are under increasing pressure to use AI to increase their productivity in building products and services. This collection helps users to realize productivity gains using codex cli, whilst in a secure and safe manner. The collection covers essential topics to help customers master codex cli safely and efficiently:

• Practical Application: Gain hands-on experience coding with Codex CLI through real-world examples.

• Code Reliability: Improve confidence and trust in generated code using specification and test-driven development (TDD).

• Advanced Automation: Boost productivity by creating custom slash commands and specialized subagents.

• Data Security: Protect sensitive information by implementing robust guardrails that restrict Codex CLI's visibility into private data.

What does the content include?

A new, comprehensive content collection dedicated to using Codex CLI

• Building with AI: Codex CLI – Introduction

• Building with AI: Codex CLI – Manual Prompting

• Building with AI: Codex CLI – Spec-Driven Development

• Building with AI: Codex CLI – Tools and MCP

• Building with AI: Codex CLI – Slash Commands

• Building with AI: Codex CLI – Guardrails

• Building with AI: Codex CLI – Demonstrate Your Knowledge
  
  Who is this content for?

• Application Security Professionals

• Developers

• Security Architects

• Engineers

Building with AI: Claude Code

This collection of eleven labs uses a brand-new lab capability - real Anthropic LLMs inside lab environments. In an industry first, these labs are the only environment out there that provides one-click access to Claude Code in a safe sandbox, allowing our customers to focus on their upskilling. This collection is available to Immersive Labs and Immersive Application Security customers, who have not opted out of AI content.

Why is this critical for you and your team?

Our customers are under increasing pressure to use AI to increase their productivity in building products and services. This collection helps users to realize productivity gains using Claude Code, whilst in a secure and safe manner. The collection covers essential topics to help customers master Claude Code safely and efficiently:

• Practical Application: Gain hands-on experience coding with Claude through real-world examples.

• Code Reliability: Improve confidence and trust in generated code using specification and test-driven development (TDD).

• Advanced Automation: Boost productivity by creating custom slash commands and specialized subagents.

• Seamless Integration: Learn how to achieve significant productivity gains by integrating Claude Code with your Model Context Protocol (MCP).

• Data Security: Protect sensitive information by implementing robust guardrails that restrict Claude Code's visibility into private data.

What does the content include?

A new, comprehensive content collection dedicated to using Claude Code

• Building with AI: Claude Code – Introduction

• Building with AI: Claude Code – Manual Prompting

• Building with AI: Claude Code – Spec-Driven Development

• Building with AI: Claude Code – Tools and MCP

• Building with AI: Claude Code – Slash Commands

• Building with AI: Claude Code – Claude Skills

• Building with AI: Claude Code – Subagents

• Building with AI: Claude Code – Hooks

• Building with AI: Claude Code – Plugins

• Building with AI: Claude Code – Guardrails

• Building with AI: Claude Code – Demonstrate Your Knowledge

  Who is this content for?

• Application Security Professionals

• Developers

• Security Architects

• Engineers

~-~

Product: Immersive Dynamic Threat

Dynamic Threat Range

The Dynamic Threat Range is a strategic evolution of our range capability, designed to transform technical exercising by greatly improving flexibility, realism, and accessibility. It puts Immersive One ahead of the competition in proving cyber resilience through technical exercising.

Key New Capabilities (Focus Areas)

The Dynamic Threat Range addresses top CISO challenges by enabling teams to exercise against the whole attack lifecycle using their familiar tech stacks and a live attack.

• Realistic Simulations: Environments are dynamically created using Infrastructure as Code (IaC) and Ansible to reflect enterprise networks, including exploitable vulnerabilities and necessary tooling. Attacks are built on real-world attacks and executed in real-time by a proprietary Immersive attack controller (Croaker) leveraging COTS offensive security tools.

• Whole Attack Lifecycle Coverage: The platform now allows customers to exercise teams across the entire attack lifecycle, including:

  • DFIR (Digital Forensics and Incident Response)

  • Threat Hunting (Proactively identify attacks post-exploitation)

• Supported Defensive Technologies (SIEMs): Facilitators can choose and configure defensive technologies to match the customer's actual environment.

  • Currently Supported: Elastic and Splunk.

• Measurable Performance Benchmarks: The platform reports on more than just accuracy and time to answer questions, measuring efficacy of containment and attacker eviction. Metrics captured per exercise include:

  • Time to Detect

  • Time to Escalate

  • Accuracy