Free
FreeEverything you need to start building real SOC skills.
- Every free operation
- SIEM, XDR & Firewall consoles
- MITRE ATT&CK® mapping
- Progress tracking
- Community access
- Pro operations
- Shift Mode
Pricing
Demand for security analysts is projected to grow 29% this decade. The skills that get you hired are hands-on. Start training them free.
Everything you need to start building real SOC skills.
The complete toolkit to become job-ready.
Flexible billing · cancel anytime
Pro training plus the controls instructors need to run a cohort.
Compare Plans
See exactly what you get with each plan.
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
Core Training | |||
| Operations | Every free one | All | All + custom |
| SIEM console access | |||
| XDR/EDR console | |||
| Firewall console | |||
| MITRE ATT&CK® mapping | |||
| Progress tracking | |||
Advanced Features | |||
| Shift Mode (live alerts) | |||
| Alert correlation engine | |||
| Performance analytics | Basic | Advanced | Advanced + Team |
Enterprise | |||
| Team management | |||
| Custom operations | |||
| Team analytics & reporting | |||
| Read-only organization API | |||
Support | |||
| Community access | |||
| Email support | |||
| Priority support | |||
FAQ
Common questions about our plans and billing.
70+ guided training operations built from real incidents. Skills that transfer directly to your SOC. Start free, upgrade when ready.
Pricing guide
Choosing the right SOC training platform depends on your career stage and goals. For those just starting out, SOCSimulator's free tier provides a production-grade SIEM console alongside XDR and Firewall, every free operation, and progress tracking. Analysts preparing for job interviews or looking to sharpen their triage speed benefit most from the Pro plan, which adds every Pro operation and real-time Shift Mode with SLA pressure. Educational provides the same organization capabilities to academies and institutions, including team management, cohorts, learning paths, analytics, custom operations, and the organization API. Academies use a 14-day evaluation with 10, 25, or 50-seat packs; universities and other institutions use contract terms. Owner portal access does not consume a Pro training seat, while instructors and learners need assigned seats.