Anyone can run the First Look cases free, no account and no watermark. Open a First Look case →First Look cases · free, no account. Open one →

White-label DFIR training: author and resell your own cases

If you run training, forensics, or managed security services, hands-on DFIR labs are a product your customers want and a product that's expensive to build. There's a way to sell the labs without running the lab factory.

A single realistic case, with planted evidence that holds up and an answer key you can defend, takes a senior specialist days to assemble. Doing that for a catalog, and keeping it fresh, is a business on its own. Generating the cases instead changes that math.

The training product without the build cost

Red Herrings generates cases instead of hand-building them. One authored scenario becomes a different, auto-graded lab for every participant, and every extra seat costs nothing to produce. That changes the economics of a training offering: you aren't paying a specialist to build a new box for each cohort, and you aren't rationing a handful of labs across all your clients.

Author your own cases

The Scenario Editor lets you build cases around the evidence and the threats your customers care about, rather than a generic catalog. Define the artifacts, the questions, the point values and the walkthrough, and the engine handles the per-participant variation and the verified answer key. Your intellectual property is the scenario; the platform does the generation and the grading.

Ship them as packs

Finished scenarios export as a scenario pack, a zip that installs from the Tackle Box in one click. You can bundle a pack as part of a course, sell it as an add-on, or hand it to a client who runs Red Herrings on their own machines.

One authored case becomes a hundred graded labs. That's the difference between selling a lab and running a lab factory.

Your brand, your participants

The Pro license covers full white-labeling, so the platform, the documents and the certificates carry your name rather than ours, with unlimited participants under one license. Clients see your training product, not a tool you resell.

Nothing to host

You generate every participant's case on your own Windows, macOS or Linux machine and hand each one a zip, which they work offline in their own tools. That keeps your delivery costs flat and lets you serve clients who can't send evidence or student work into someone else's cloud.

Thinking about a white-label training product?

Tell us what you want to build and we'll walk you through the Pro plan and the Scenario Editor. You can also browse how scenario packs work today.