Labshock is a hands-on Operational Technology (OT) security platform designed to help cybersecurity professionals, engineers, and organizations build, test, and validate their industrial security capabilities in a controlled environment. Focused on real-world Industrial Control Systems (ICS), including Modbus-based infrastructures and programmable logic controllers (PLCs), Labshock bridges the gap between theory and practical application. Built as a distributed, on-premise-first solution, Labshock ensures that all data is locally stored, processed, and fully configurable within the user’s environment. This approach gives organizations complete control over sensitive OT data, supports compliance requirements, and enables secure deployment in isolated or air-gapped networks without reliance on cloud services. Labshock combines a cyber range, OT SIEM (Security Information and Event Management), and attack simulation framework into a unified platform. Users can create realistic lab environments, simulate industrial protocols, and execute both offensive and defensive scenarios without impacting production systems. The platform provides deep visibility into industrial network traffic, helping users monitor, analyze, and detect anomalies across OT communications. A core capability of Labshock is detection engineering for OT networks. Users can simulate and classify attacks - such as unauthorized coil writes, abnormal polling, and protocol misuse - while collecting logs and telemetry for analysis. This makes it ideal for developing detection rules, validating security controls, and improving incident response processes in ICS environments. With a modular and extensible architecture, Labshock includes components for traffic capture, log aggregation, correlation, and visualization. It supports containerized deployments and integrates easily into existing environments, making it suitable for training, research, and enterprise security validation. Labshock empowers penetration testers, SOC analysts, OT engineers, and security teams to build real-world skills and strengthen their industrial cybersecurity posture through practical, data-driven insights.