Retrospect Labs
Retrospect Labs is an Australian cyber security exercises company that designs, delivers, and software-enables (via its Gauntlet platform) incident response exercises for critical infrastructure operators, government departments, and SMEs across Australia and Southeast Asia.
- Company typePrivate
- Founded2019
- HeadquartersPerth, Australia
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Retrospect Labs does
Retrospect Labs Pty Ltd is an Australian cyber security exercises company founded in 2019 and headquartered in Perth, with a distributed workforce and a sub-10-person team led by co-founders Jason Pang (CEO) and Ryan Janosevic (COO), both former Australian Government Incident Responders. The company designs, delivers, and supports structured exercises that allow organisations to practice incident response against simulated cyber threats, covering everything from tabletop discussions to multi-day, multi-team functional exercises involving forensic artefacts and real-world tradecraft. Its core product is Gauntlet, a cloud-based cyber security exercise platform built on Kubernetes, Pulumi, C#/.NET, MS SQL/EF Core, Angular/TypeScript, and Azure, which features purpose-built capabilities such as Personas (simulated entities representing agencies, regulators, MSSPs, or internal teams), Mailbox (capture of intra-participant email communications), Exercise Apps (phishing sites, forensic lab environments, beaconing simulation), analytics dashboards, and integrations with case management tools like Jira, ServiceNow, and Cydarm.
Retrospect Labs monetises through two complementary streams: (i) recurring Gauntlet SaaS subscriptions, including an Early Adopter Program that lets customers run their own exercise programs in-house, and (ii) professional services for custom Exercise Programs and Response Lab (guided hands-on training such as the A$2,000+GST Ransomware Live Fire Exercise). Its primary customers are Australian critical infrastructure operators (AEMO, Synergy, SA Power Networks, Woodside Energy), federal and state government departments (Department of Defence, DFAT), education institutions (Monash University, the 12-TAFE TAFEcyber consortium), and — more recently — SMEs reached through the Australian Cyber Collaboration Centre (A3C) partnership and international critical infrastructure in Thailand and Laos through DFAT-funded programs delivered with NCSA Thailand and Thaitan Consulting. Pricing is predominantly quote-based for enterprise engagements, with annual subscription billing for the platform.
The company pursues a hybrid go-to-market combining direct enterprise field sales, product-led growth via the Gauntlet Early Adopter Program, and event-driven pipeline generation through recurring incident response competitions (AWSN, TAFEcyber, AdelaideSEC, ComfyConAU). It has built a partner ecosystem spanning AWSN, A3C, Thaitan Consulting, Phronesis Security, CyRise, AustCyber SA Node, and a sovereign-cyber consortium with Cydarm, Elttam, and Penten that co-delivered the Accelerated Defence Cyber Training program for the Australian Defence Force. The company achieved ISO/IEC 27001:2022 certification (JAS-ANZ accredited) in 2025, formalising the trust posture required by regulated buyers, and remains privately held and founder-led with no disclosed institutional venture capital funding.
Retrospect Labs firmographics
Firmographics- Name
- Retrospect Labs
- Legal name
- Retrospect Labs Pty Ltd
- Website
- https://retrospectlabs.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Retrospect Labs is an Australian cyber security exercises company that designs, delivers, and software-enables (via its Gauntlet platform) incident response exercises for critical infrastructure operators, government departments, and SMEs across Australia and Southeast Asia.
- Ownership category
- akta.pro rank
Retrospect Labs industry classification
Industry- Product category
- Cyber Security Exercise Software
- NAICS
- Other Scientific and Technical Consulting Services (54169), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370), Services-Management Consulting Services (8742)
- akta.pro primary industry
- Security Incident Response (IR) & Digital Forensics Services (BPAEADAI)
- akta.pro secondary industries
- IT Incident, Problem & Change Management Platforms (HDAEALAI), Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL)
Keywords
Where Retrospect Labs is headquartered
LocationHeadquarters
- HQ city
- Perth
- HQ country
- Australia
- HQ region
- Oceania
Offices1 record
Markets served
Retrospect Labs business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Others
Revenue model
- Gauntlet SaaS Platform Subscriptions: Subscription-based access to the Gauntlet cyber security exercise platform with templates, exercise tools, and analytics capabilities. Early Adopter Program subscribers get access plus support for running in-house exercises.
- Professional Services - Exercise Delivery: Retrospect Labs designs and delivers custom cyber security exercises for organisations, including incident response exercises, tabletop exercises, and competitive events. Revenue is project-based with fixed fees per exercise or program.
- Training Programs: In-person and virtual training courses such as Ransomware Live Fire Exercise delivered at $2000+GST per participant, with scholarships for diversity participants
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Unit Pricing | One time/ perpetual license | Ransomware Live Fire Exercise - In-person training |
| Subscription | Annual | Gauntlet Platform - Subscription |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels6 records
Retrospect Labs product offering
Product offeringCore offering
Retrospect Labs designs and delivers cyber security exercises through its proprietary Gauntlet SaaS platform, enabling organisations to design, execute and assess incident response exercises on-demand. The company complements the platform with Response Lab (guided hands-on incident response training delivered by former Australian Government incident responders) and Exercise Programs (custom managed-service engagements tailored to an organisation's threat profile). Customers are predominantly critical infrastructure operators, government departments and large enterprises in Australia and selected Southeast Asian markets.
Product overview
Retrospect Labs offers a unified portfolio of cyber security exercise products and services built around its core proprietary platform, Gauntlet. Gauntlet serves as the central technology platform that enables organisations to independently design, execute, and assess cyber exercises using pre-built templates and features such as Mailbox and Personas. Gauntlet is complemented by two managed service lines: Response Lab (guided hands-on incident response training delivered by former government incident responders) and Exercise Programs (custom engagement services covering the full spectrum from tabletop discussions to complex multi-team functional exercises). Together, the platform and services enable organisations to continuously practice and improve their incident response readiness.
Differentiator
Problem solved
Functional benefit
Brands
- Gauntlet: Cyber security exercise platform that enables organisations to run their own cyber security exercises, test and improve incident response capability, and improve readiness. Features include templates, Mailbox, Personas, dashboards, and exercise apps.
Quantifiable outcome
- Helps organisations reduce incident impact and return to business as usual faster
- +1 more outcomes
Companies that use Retrospect Labs
Customer profileNamed customers8 records
Segments4 records
Ideal customer profiles5 records
Retrospect Labs technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration1 record
Feature6 records
Retrospect Labs partnerships and signals
Strategic signalPartnerships
Eleven partnerships are on record, tiered core and minor.
- Thaitan ConsultingcoreThailand-based partner for market expansion, providing on-ground representation for delivering Retrospect Labs' product and service offerings in Thailand. Led by Kawin Boonyapredee, the team demonstrated technical expertise and broad cyber security knowledge for both executive and technical audiences.
- Australian Cyber Collaboration Centre (A3C)corePartnership to deliver cyber security exercises to SME organisations that would otherwise lack access to this type of training. A3C leverages their partnership base to routinely conduct SME exercises with Retrospect Labs providing content and Gauntlet platform.
- TAFEcybercorePartnership with consortium of 12 TAFEs managing Australia's Certificate and Diploma in cyber security to deliver national incident response challenges for TAFE students.
- Phronesis SecurityminorPartnership to offer cutting-edge cyber incident simulation program combining Phronesis Security's capabilities with Retrospect Labs' exercise platform and delivery expertise.
- National Cyber Security Agency (NCSA) ThailandcoreThailand's newly established National Cyber Security Agency partnered with Retrospect Labs to facilitate delivery of cyber exercises to Thai critical infrastructure organisations across seven sectors.
- Australian Women in Security Network (AWSN)coreOngoing partnership delivering annual incident response competition exclusively for women in cyber security. Competition expanded from 100 participants in 2021 to 250 in 2022 and continues annually.
- AustCyber SA NodecorePartnership with AustCyber South Australia Node for event sponsorship and delivery, including scholarships for women to participate in ransomware live fire exercises.
- Department of Foreign Affairs and Trade (DFAT)coreDFAT awarded a grant under the Cyber and Critical Tech Cooperation Program (CCTCP) to deliver multi-phase cyber security exercise programs internationally. Retrospect Labs partnered with DFAT and Thai NCSA to deliver exercises in Thailand, with subsequent programs planned for Laos and South Pacific.
- CyRise AcceleratorminorGraduated from CyRise Accelerator Cohort 3 in 2020, which helped shape company thinking and facilitated market validation through the accelerator program.
- Cydarm, Elttam, PentencoreConsortium of sovereign cyber security companies (Cydarm, Elttam, Penten, and Retrospect Labs) formed to deliver remote cyber security training to Australian Defence Force, co-delivering the Accelerated Defence Cyber Training program.
- Edith Cowan University (ECU)minorECU Work Integrated Learning program partnership providing internship opportunities for cyber security students. Program has produced multiple successful hires including one founding team member.
Scale indicators6 records
Recent moves6 records
Expansion highlights6 records
Retrospect Labs competitors and assessment
Company assessmentEmerging players
- Picus Security: Continuous security validation vendor combining breach-and-attack simulation with exposure analytics — overlapping with Retrospect's exercise-driven readiness measurement but targeting a broader mid-market.
- RangeForce: Cloud-based cyber skills and readiness training platform targeting enterprise SOC teams, with adjacent exercise-style hands-on simulations that overlap Retrospect's Response Lab and Gauntlet templates.
Direct peers
- Phronesis Security: Australian cyber incident simulation partner of Retrospect Labs; delivers complementary exercise programs to similar government and critical-infrastructure customers in Australia.
- SafeBreach: Breach and attack simulation platform that operationalizes continuous security testing, overlapping with Retrospect's use of simulated phishing sites, forensic labs and beaconing activity in Gauntlet exercises.
- Cymulate: Exposure management and attack simulation platform that, like Retrospect, helps organizations validate detection and response readiness against real-world adversary techniques.
- SimSpace: Cyber range platform used by governments and large enterprises for high-fidelity cyber exercises and team training — a comparable cyber-range competitor especially in the defense/intelligence segment.
- AttackIQ: Security validation platform that lets organizations continuously test controls via simulated adversary behavior, closely mirroring Retrospect's exercise-driven readiness validation model for enterprise security teams.
- Immersive Labs: Provides a cyber resilience platform that includes exercises, simulations and crisis-response training for enterprise and government security teams — the closest direct competitor to Retrospect Labs' Gauntlet + Response Lab offering.
Regional players
- ControlPoint Technologies (Cyber Range): Australian cyber range and exercise provider serving APAC governments and critical-infrastructure operators — a geographically overlapping peer competing for the same sovereign-Australia buyers.
- Tiberium (formerly Commissum): UK/APAC cyber security consultancy with cyber exercising and incident response services — a comparable regional player offering exercise delivery and assurance to enterprise and government.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
Retrospect Labs social profiles
Digital presenceRetrospect Labs compliance and trust
Trust signalCompliance1 record
Retrospect Labs financial estimates
Financial estimateRevenue estimate
Valuation estimate
Retrospect Labs leadership team
Management profileNumber of profiles
Profiles3 records
Retrospect Labs funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Retrospect Labs M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Retrospect Labs
What does Retrospect Labs do?
Retrospect Labs designs and delivers cyber security exercises through its proprietary Gauntlet SaaS platform, enabling organisations to design, execute and assess incident response exercises on-demand. The company complements the platform with Response Lab (guided hands-on incident response training delivered by former Australian Government incident responders) and Exercise Programs (custom managed-service engagements tailored to an organisation's threat profile). Customers are predominantly critical infrastructure operators, government departments and large enterprises in Australia and selected Southeast Asian markets.
Is Retrospect Labs a public or private company?
Retrospect Labs is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Retrospect Labs founded?
Retrospect Labs was founded in 2019. It employs 1 to 10 people.
Where is Retrospect Labs based?
Retrospect Labs is headquartered in Perth, Australia, in the Oceania region.
How does Retrospect Labs make money?
Three revenue lines are on record. Gauntlet SaaS Platform Subscriptions are the primary driver. The others are professional Services - Exercise Delivery and training Programs.
Who are Retrospect Labs's main competitors?
Emerging players on record are Picus Security and RangeForce. Direct peers are Phronesis Security, SafeBreach, Cymulate, SimSpace, AttackIQ and Immersive Labs. Regional players are ControlPoint Technologies (Cyber Range) and Tiberium (formerly Commissum).
Does Retrospect Labs have an API?
No public API is recorded for Retrospect Labs.
What industry is Retrospect Labs in?
Retrospect Labs's product category is Cyber Security Exercise Software. Its primary akta.pro industry code is BPAEADAI, Security Incident Response (IR) & Digital Forensics Services, with a secondary code of HDAEALAI, IT Incident, Problem & Change Management Platforms. Its NAICS code is 54169 and its SIC code is 7372.