G2

Mark R.

Principal Security Analyst

Small-Business (50 or fewer emp.)

5/14/2026

"Like OSCP but for the Cloud!"

5/5

What do you like best about Pwned Labs?

Pwnlabs is a modern (quick, easy and free*) platform for learning cloud TTPs from an adversary’s perspective, which is great for improving blue team defensive understanding. If you have questions or need support, the team isn’t far away on Discord and is quick to help. Review collected by and hosted on G2.com.

What do you dislike about Pwned Labs?

The labs can occasionally develop minor bugs over time as cloud technology changes, but once these issues are reported, they’re addressed and fixed quickly. Review collected by and hosted on G2.com.

What problems is Pwned Labs solving and how is that benefiting you?

PwnedLabs offers up-to-date adversary techniques through cloud-based labs. It’s affordable and works well across multi-cloud environments. After trying some of the free labs (which I thought were excellent), I eventually took the paid Pwned Labs Microsoft Cloud Attack & Defense Bootcamp. The bootcamp delivered solid foundational coverage of Azure, Entra ID, and Microsoft Graph, and it complements that with hands-on offensive and defensive techniques tailored to cloud environments. A major focus is on gaining and expanding access through identity-based attack paths, such as token and permission abuse, as well as simulating realistic scenarios using purple team methods. It also covers how to secure and test a broad range of Azure services, including App Services, virtual machines, and storage. Review collected by and hosted on G2.com.