Skip to main content
Network cabling in a server rack
SecurityA network-security technology partner

A Network Security Lab Rebuilt From Code for Every Evaluation

The whole lab, recreated from code in under an hour for each evaluation.

Under 1 hour

To recreate the full lab from code

Terraform

Every component defined as code

Reusable

Modules used on other client work

The problem

A partner evaluating network-visibility tooling needed a realistic AWS environment to validate detection and monitoring configurations. Every evaluation cycle needed the same environment again, so it had to be repeatable.

What we built

  • Network and traffic taps

    The VPC, subnets and traffic-tap agents, defined in Terraform.

  • Monitoring tools

    Splunk, Security Onion and ntopng, deployed with bootstrap automation.

  • Detection test target

    A traffic generator and a deliberately vulnerable web application for detection testing.

  • Reusable modules

    A Terraform module library, reused across BeyondScale client infrastructure.

How the lab is rebuilt for each evaluation

  1. Define

    The whole lab is written in Terraform: the VPC and subnets, traffic-tap agents (Gigamon vTAP), Splunk, Security Onion, ntopng, a traffic generator and a deliberately vulnerable web application.

  2. Bootstrap

    Bootstrap automation sets up every component.

  3. Evaluate

    The partner validates its detection and monitoring configurations in a realistic AWS environment, using the traffic generator and the vulnerable application.

  4. Rebuild

    For the next evaluation cycle, the same environment is recreated from code in under an hour.

Want similar results?

Tell us what you are building or running and we will scope the first step.

An engineer replies within one business day.

Prefer to talk?

Book a Meeting
Book a Meeting