Hey everyone, if you manage cloud infrastructure, Kubernetes, or container workloads and use tools like CSPM / CNAPP / runtime protection / WAF / IDS, you probably hope they catch real attacks. But how if they work under real-world conditions?

That’s where ARMO CTRL comes in: it’s a free, controlled attack lab that helps you simulate real web-to-cloud attacks, and validate whether your security stack actually detects them

What it does

• Spins up a Kubernetes lab with intentionally vulnerable services, then runs attack scenarios covering common real-world vectors: command injection, LFI, SSRF, SQL injection
• Lets you test detection across your full stack (API gateway / WAF / runtime policies / EDR / logging / SIEM / CNAPP) to see which tools fire alerts, which detect anomalous behavior, and which might miss something