About CLIP
Building a sovereign ecosystem for cyber competence and readiness.
CLIP exists because organizations can invest heavily in cyber training and still be unable to answer a simple question: are our people actually ready for the mission we would give them?
Vision
Enable organizations to develop, exercise, verify and continuously improve cyber competence and mission readiness.
Through safe, realistic, measurable and sovereign training environments — where every readiness claim can be traced back to something that was actually observed.
The problem
Separate systems for courses, labs, exercises and certification fragment identity, progress and evidence — producing completion records without proof of competence.
The opportunity
A common capability foundation across education, government, defence, critical infrastructure and industry, turning exercises into continuous control validation.
The measure
The percentage of assigned personnel demonstrably ready for a target role within the required time, supported by current, traceable and reviewable evidence.
Product principles
Ten commitments the product is held to.
These are design constraints, not marketing values. Each one rules something out.
Mission-driven
Capabilities begin with mission outcomes, work roles and decisions — not with tools or team colours.
Evidence-first
Readiness claims must be traceable to observed performance and retained evidence.
Safe-by-design
Offensive actions are authorized, isolated, bounded, monitored and terminable.
Secure-by-design
Identity, least privilege, segmentation, supply-chain assurance and auditability are default behaviours.
Sovereign-capable
Core functions operate without dependency on public Internet or foreign software-as-a-service.
Human-accountable AI
AI assists training and assessment; authorized humans retain decision and release authority.
Open and interoperable
Prefer open standards, documented interfaces and appropriately licensed open-source components.
Composable
Courses, labs, scenarios, ranges, injects, detection content and assessments are reusable building blocks.
Role-neutral core
Team colours are configurable views over formal roles, capabilities and permissions.
Progressive assurance
Security, safety, privacy, reliability and compliance evidence grow with product maturity.
Ecosystem
Who this is built with.
Institutions
Universities, academies, agencies and enterprises operating their own deployments.
Instructors and assessors
The people who design pathways, run exercises and adjudicate evidence.
Platform operators
Teams responsible for availability, capacity, safety and support.
Researchers
Reproducible, governed experiment environments and datasets.
Certification partners
Authorized bodies that turn assessment evidence into regulated credentials.
Open-source communities
The projects CLIP depends on and contributes back to.
Roadmap
Capability maturity, not promised dates.
Each phase requires a go/no-go review based on evidence, residual risk, operational readiness and affordability — not feature count.
- 00Discovery and assurance foundationConcept of operations, role taxonomy, control catalogue, data classification and threat model.
- 01Integrated MVPThe end-to-end digital thread: portal, learning, exercise control, range, telemetry, evidence and bounded AI.
- 02Institutional productSelf-service catalogues, quotas, DFIR and DevSecOps labs, offline update and management-system readiness.
- 03Multi-team readiness platformAdvanced Purple and Gold exercises, certification integration, OT/cloud/mobile modules.
- 04Federated sovereign ecosystemFederated ranges, releasable content exchange and regional continuity.
- 05Advanced AI and researchEvaluated multi-agent scenarios, AI red-teaming and research workspaces.
Partnership models
Ways to work together.
Research
Joint research programmes with governed datasets and reproducible environments.
Scenario content
Co-developed scenarios, injects and rubrics for sector-specific missions.
Technology integration
Connecting identity, learning, SOC and workforce systems through documented interfaces.
Training delivery
Instructor enablement and programme design with partner training providers.
Assurance
Control mapping, evidence models and independent verification support.
Certification
Working with authorized certification bodies on regulated competency schemes.
Team
Leadership.
Add verified profiles before publishing
Discuss a partnership.
Research, content, integration, delivery, assurance or certification — tell us what you have in mind.