TurboPentest VR - Private Beta
A cyber-security shooting range you can actually shoot
A 60-metre VR shooting range on your Meta Quest. 22 invented cyber-themed weapons, 23 ammunition loads, 10 courses of fire, and your own agentic AI pentest findings walking the lane as five tiers of machine. A VR shooting game where trigger discipline is the game.
In private beta on Meta Quest. Steam is next.
At its heart, a war room
Your pentests, in a room you can walk around
TurboPentest VR is a war room first: a command deck floating above the clouds where your agentic AI pentests live. Connect your TurboPentest account and every report you own fills the room.
Navigate your reports
A findings board of grabbable cards sorted from critical to info, a detail panel for every finding, and a severity filter on the grip. Pick any pentest from your history and walk through it in space.
Monitor pentests live
While a pentest runs, a wall of agent screens streams what every tool is doing in real time, queued to running to complete, with findings landing on the board as the agents confirm them.
Every panel is a window
Grab any surface, move it, reel it in, push it away, minimise it. Build the layout you want around you. When you are ready to shoot something, the range is one door away.
Your findings, cast as machines
Point TurboPentest at your own pentest and its findings walk the lane as machines, scaled by severity.
A Critical is a four-metre multi-phase mech that deploys the others as adds.
A High is an armoured humanoid.
A Medium is a robotic canine.
A Low is a swarm of robot bees.
An Info finding is a loot courier.
The armory
22 invented cyber-themed weapons and 23 ammunition loads, every one with its own caliber, action, and reload ritual.
DDoS
SPEARPHISH
BACKDOOR
CHIP SHOT10 courses of fire
TODAY'S GLOBAL RUN - SAME SEED AND GUN FOR EVERYONE
ESCALATING WAVES - THREE SHIELDS - ONE LIFE - PICK AN UPGRADE BETWEEN WAVES
DISTANT PLATES, ONE AIMED SHOT AT A TIME
CLOSE AND FAST AT HANDGUN DISTANCE
DENSE FAST SWARMS AT ARM'S LENGTH
SPARSE, HIGH VALUE - EVERY SHOT COUNTS
CALL THE BIRD - BREAK IT BEFORE IT LANDS
THE MIXED RUN - EVERY THREAT, YOUR GUN, YOUR DISTANCE
YOUR OWN FINDINGS, ARMED AND WALKING
ESCALATING WAVES UNTIL THE SHIELDS ARE GONE
Trigger discipline counts
Not everything coming down the lane is a threat. Legitimate mail carries a colour-blind-safe green checkmark seal and is built 30% larger than any phishing envelope; a production server drifts by as a near-black rack with amber hazard bands. Shoot either one and it costs you, plus a permanent SHOT PROD stamp on the run if you hit the server. The range rewards reading the target, not just pulling the trigger.
Everything in the box
- A war room in the sky: navigate every pentest report you own as grabbable panels in space
- Live monitoring: agent screens update in real time, tool by tool, while a pentest runs
- 22 invented cyber-themed weapons, from a rimfire plinker to a .50 anti-materiel rifle, a recurve bow, a thrown axe, and a pitching wedge with a real ball-flight model
- 23 ammunition loads switched on the thumbstick mid-run
- Tube-fed weapons remember mixed loads shell by shell
- A ballistic gel bay that carves the real wound channel, with depth and cavity printed beside it
- 10 courses of fire
- Skeet with called birds and a trap house
- Five tiers of finding bosses built from your own agentic AI pentest findings
- Remediation banking: fix a finding for real, bank a permanent upgrade
- ARCADE mode with an upgrade draft between waves
- Ghost rivals
- A global daily challenge on one worldwide seed
- Global leaderboards
- Share links and QR codes
- A recorded announcer with world-space callouts
- Dual-wielding on 14 weapons
- Two rifles with real see-through optics
- An unlock ladder ending in a directed-energy endgame weapon
- Physical reload rituals: cylinder, pump, bolt, lever, break, string draw
- Snap and smooth turn with an adjustable comfort vignette
- Standing or roomscale
Compete without a lobby
Asynchronous social play only. Global leaderboards, a worldwide daily challenge on a single shared seed, ghost rivals (race a recorded replay of another player's run), and share links. No live sessions, no lobbies, no matchmaking, no voice chat.
Your data stays yours
Findings stay on your headset. Once a finding becomes a boss, the encounter carries only an opaque id, a title, a category, and a severity, with no reference path back to the pentest it came from. THREAT ASSESSMENT runs, built from your own findings, can never post to the global leaderboard, a share link, or a QR code, by design.
Request access to the private beta
TurboPentest VR is in private beta for current TurboPentest users. Tell us which headsets you have and why you would be a useful tester.
Loading…