Overview
Explore
Labs
Services
Events
Partners
What's popular
Mythos Is Coming. Are You Building Walls or Traps?
Anthropic's forthcoming Mythos model wasn't built to hack. It just learned how — and it's good at it. In this AI Proving Ground Podcast episode, former NSA cybersecurity director Rob Joyce and WWT cyber leader Kent Noyes break down what Mythos means for your security posture and what the defender's playbook looks like now.
Defending at the Speed of AI
A 12-point response plan for cybersecurity and resilience leaders
Palo Alto NGFW Foundations Version 11 Lab
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
Cyber Range - Initiation
Initiation is a Capture the Flag (CTF) lab meant to introduce you to the WWT Cyber Range platform and serve as a tutorial for future events. You will be introduced to the features and functionality as well as provided tips for success during future WWT Cyber Range CTFs. This lab will also allow you to test your access using the same platform we use for our live CTF events so you can make sure you will be ready on game day.
Securing AI When Agents Move Faster Than Humans Can Respond
AI security is entering a new phase where models like Anthropic's Mythos are becoming more capable and agentic systems can take action across enterprise environments. The risk is no longer just bad answers or hallucinations. It is speed, scope and blast radius. In this episode of the AI Proving Ground Podcast, WWT security leaders Jillian Nix-Anderson and Istvan Berko explore how organizations can secure themselves in the agentic AI era, where vulnerability discovery, response timelines and operational complexity are all accelerating. And they talk about how WWT's ARMOR framework helps teams structure the conversation across infrastructure, models, data, software development, operations and compliance.
What's new
Illumio Insights - Visibility in a Post-Mythos World
A financial services scenario demo of Illumio Insights surfacing lateral movement and shaping policy in a post-Mythos world.
Frontier Forensics: Network Visibility, Segmentation and Forensics for ARMOR
Network forensics is being rearchitected for AI-scale environments. This piece lays out a vendor-diverse, federated data fabric: Gigamon for visibility, ExtraHop for forensics, Forescout for enforcement and Splunk for operations. This solution maps to the Infrastructure Security domain of WWT's ARMOR framework and previews where AMI metadata and the DPU substrate are taking the stack next.
Securing AI When Agents Move Faster Than Humans Can Respond
AI security is entering a new phase where models like Anthropic's Mythos are becoming more capable and agentic systems can take action across enterprise environments. The risk is no longer just bad answers or hallucinations. It is speed, scope and blast radius. In this episode of the AI Proving Ground Podcast, WWT security leaders Jillian Nix-Anderson and Istvan Berko explore how organizations can secure themselves in the agentic AI era, where vulnerability discovery, response timelines and operational complexity are all accelerating. And they talk about how WWT's ARMOR framework helps teams structure the conversation across infrastructure, models, data, software development, operations and compliance.
Partner POV | Smarter DDoS Security at Scale
In a world dominated by encrypted traffic, NETSCOUT's Arbor Edge Defense offers a strategic solution to combat encrypted DDoS attacks. By employing selective decryption, it intelligently targets suspicious traffic, preserving system resources while ensuring robust protection. This approach redefines security, balancing efficiency and effectiveness in the face of evolving threats.
CTEM + DDI: Transforming Network Intelligence into Security Advantage
Continuous Threat Exposure Management (CTEM) transforms network security by integrating with DDI solutions to provide real-time asset intelligence. This synergy enables dynamic threat detection, accurate CMDB reconciliation, and strategic remediation. By leveraging DDI's comprehensive data, CTEM enhances security operations, ensuring continuous, rather than episodic, vulnerability management.
Claude Mythos and the Remediation Velocity Gap
WWT's agentic patching and remediation approach leverages agentic AI and deterministic automation to bridge the gap between vulnerability discovery and defense. As AI accelerates exploit development, this governed model ensures safe, efficient remediation, urging enterprises to adapt and maintain control in an evolving threat landscape.
Cisco Secure Firewall Firepower Sandbox 7.4
Cisco Secure Firewall/Firepower Management NGFW Sandbox lab is a capability of the Advanced Technology Center (ATC). This is designed to provide an environment to gain hands-on experience with the Cisco Secure Firewall version 7.4. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
Mythos Is Coming. Are You Building Walls or Traps?
Anthropic's forthcoming Mythos model wasn't built to hack. It just learned how — and it's good at it. In this AI Proving Ground Podcast episode, former NSA cybersecurity director Rob Joyce and WWT cyber leader Kent Noyes break down what Mythos means for your security posture and what the defender's playbook looks like now.
Defending at the Speed of AI
A 12-point response plan for cybersecurity and resilience leaders
Securing DNS in Hybrid and Multicloud Environments
Navigating DNS security in hybrid and multicloud environments poses challenges, such as fragmentation, logging gaps, and service availability risks. As cloud resources evolve, visibility and AI-powered detection become crucial for countering threats such as DNS tunneling and hijacking. Strategic integration of DDI platforms and cloud-native tools is essential for robust security.
Partner POV | Securing the Post-Mythos Attack Surface: How to Defend Against Autonomous AI Agents and LLM Threats
In the Post-Mythos era, AI autonomously exploits vulnerabilities at machine speed, challenging traditional cybersecurity measures. ExtraHop's real-time network insights offer a dynamic defense, revealing true attack surfaces and enabling rapid response. As AI threats evolve, network telemetry becomes essential for securing environments against these sophisticated incursions.
Partner POV | What Is Lateral Movement in Cybersecurity?
Lateral movement in cybersecurity allows attackers to stealthily navigate networks post-breach, escalating privileges and accessing sensitive data. This technique transforms minor breaches into major threats. Understanding and preventing lateral movement through deep network visibility, Zero Trust, and least privilege access is crucial for safeguarding organizational assets.
Partner POV | Network-Derived Telemetry Deemed 'Essential.' Who Knew?
Gartner's new reference architecture elevates network-level telemetry to a strategic necessity, emphasizing its role in enhancing service-level observability and security. By integrating network-derived insights, organizations can make faster decisions, reduce risks, and ensure resilient digital services, transforming telemetry from an afterthought to a foundational architectural element.
Why DNS Security in a DDI Solution Wins
DNS is the most queried protocol in any enterprise — and the most exploited. A DDI solution with native DNS security and Threat Intelligence does not simply detect threats at the perimeter; it identifies, correlates, and blocks malicious activity before a single byte reaches an endpoint. Infoblox BloxOne Threat Defense, powered by real-time TIDE and Dossier intelligence, delivers exactly that — at scale, across hybrid and multicloud environments.
Partner POV | Key Findings: 2026 ThreatLabz VPN Risk Report
The Zscaler ThreatLabz 2026 VPN Risk Report highlights a critical mismatch: while AI has accelerated the speed of cyberattacks, traditional VPN visibility and patch cycles remain dangerously slow. "Good enough" security is no longer sufficient when adversaries scale at machine speed.
ATC+
Palo Alto Networks Next-Generation Firewall (NGFW) Intermediate
Once you've mastered the basics of Palo Alto's NGFW with the fundamentals Learning Path, it's time to continue your education with the intermediate LP. This Learning Path will teach you topics that help get further use out of your NGFW such as SSL Decryption. Once you've configured SSL Decryption, the NGFW will be able to defend your network in new ways, including URL Filtering, Credential Detection, DGA Detection, DNS Sinkholes, and more!
DDI is Everyone's Problem. Not Just the Network Teams.
DNS, DHCP and IP address management are collectively known as DDI. Learn why security, cloud, application and DevOps teams all have skin in the DDI game and what happens when they're left out of the conversation.
Securing the Unsecurable: How Zscaler Airgap Protects Devices That Can't Protect Themselves
Billions of IoT and OT devices can't run security software, making them prime targets and easy entry points for attackers. This blog explores how Zscaler Airgap delivers agentless, zero trust segmentation to protect every device on your network, regardless of its capabilities.
ATC+
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 11 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
SSE and SASE Market Scan Workshop
Selecting the right Secure Access Service Edge (SASE) or Security Services Edge (SSE) solution is complex. With a crowded vendor landscape and evolving business requirements, making a confident, informed decision can feel overwhelming. WWT's Market Scan approach cuts through the noise, delivering objective, research-backed insights that align technology to your business priorities and accelerate your path to the right solution.