Your first Enterprise Season starts now: Operation Red Horizon

Okay, that’s not how we usually start a blog. Bear with us, because it’s kind of the whole point.

We’re launching Operation Red Horizon, a 3-month, story-driven training Season exclusive to HTB Enterprise Platform. It’s the first Season we’ve built for enterprise teams, and while it shares the idea of an evolving narrative with HTB Labs Seasons, it's designed to solve a very different challenge.

Let’s get into it.

What’s the Enterprise Season (and why Enterprises need their own version)?

If you've trained on HTB Enterprise Platform before, you know we've traditionally released exclusive Machines, Sherlocks, and Challenges each month. Great content, delivered one piece at a time.

With Operation Red Horizon, we're evolving that experience.

Instead of standalone content drops, every Challenge, Sherlock, and Machine is now part of a single, unfolding story. Each scenario moves the mission forward, giving teams a shared narrative and a common objective throughout the Season.

“Season” may sound familiar, as they already exist on Hack The Box Labs. Possibly you know the drill: themed content, a running storyline, a leaderboard to climb…Great for individual players who want to compete and show off their rank.

Enterprise Seasons are built around a different goal.

Enterprise teams don’t need a leaderboard. They need to eliminate silos. Your SOC analysts, Cloud leads, and OT engineers typically operate separately, but modern adversaries don't care about your organizational chart.

So for Operations Red Horizon we flipped the format. There’s no leaderboard and you’re not racing your coworkers. The story isn’t layered on top of the content; it is the content! You succeed by solving scenarios, sharing insights, and helping your teammates progress through the mission. It’s still a solo play, but the flex is bragging rights with your coworkers, not a rank against strangers.

The story: Zenium, Arodor, and the flight for Vitalium

The year is 2044. Earth is fragile, living in the aftermath of the Dark War. Infrastructure is fragile, trust is damaged, and even “peace” feels like a temporary setting.

Zenium, a coalition that believes survival depends on fairness and reliable systems, is racing to launch a mission to Mars and secure Vitalium, a rare Martian raw material that can be refined into what Earth can’t easily produce anymore: steady energy, clean water recovery, and critical medical manufacturing at scale.

Arodor, an authoritarian rival power, believes stability comes from control, and control comes from dependency. They want that mission to fail, and they’re not attacking with anything as clumsy as DDoS. They’re running a stealth, multi-domain campaign: proxy actors, spoofed telemetry, forged paperwork…the kind of attack that looks like normal operations right up until it isn’t.

You’re not watching this from the sidelines. You’re stepping into Team Phoenix, Zenium’s elite cyber task force, alongside Sable, Nava, and Zhao. Your task? Hunt down Arodor’s proxies, harden the grid, vet the supply chain, and keep the launch window clean. Every scenario is a piece of that flight.

Three Acts. Twelve weeks. One mission

Operation Red Horizon runs across three Acts, one per month, starting with Gridfall Signals.

Act 1 - Gridfall Signals
Arodor’s opening move against critical infrastructure. Grid faults that aren’t accidents, an emergency pipeline under quiet siege, and a first strike back at the operators pulling the strings.

Each Act includes one:

• Challenge

• Sherlock &

• Machine

…released weekly. 

A slow, weekly reveal means your team can’t binge it solo the night before a deadline. It forges the kind of recurring, cross-functional huddle that one-off training never manages to create.

And yes, there’s a reward for showing up. Each month, the first players to clean every scenario earn a spot in the Phoenix Elite and win a mystery swag pack. No leaderboard, no public callouts! Just recognition on the ones that go all in.

Why opt-in to Enterprise Season?

The story may be fictional, but the attack techniques aren't.

Real-world incidents like the XZ Utils backdoor and SolarWinds weren’t loud, obvious breaches. They were slow, patient compromises of the supply chain, sitting quietly inside tools everyone already trusted.

Modern attackers aren’t trying to smash the front door anymore. They’re forging the paperwork that gets them waved through it. Security teams call this “living off the land”, using valid credentials and normal-looking actions to hide in plain sight.

Operation Red Horizon puts your team’s hands directly on that problem: SBOM audits, firmware validation, code-signing attacks, telemetry spoofing, forged compliance trails. No generic network security.

And because it’s cross-domain by design, it does something static training doesn’t…it puts your SOC analysts, your OT engineer, and your Cloud security lead, etc., in the same incident, forced to compare notes. When a real cross-domain breach hits your organization, that’s exactly the muscle memory you want already built-in.

Is your team ready to join Phoenix cyber task force?

Arodor isn’t waiting and neither is the countdown to launch. Operation Red Horizon goes live this week on HTB Enterprise Platform.

3 Acts - 12 Weeks - 1 Mission

The grid is failing. Trust is the real target. Are you ready?