Generic headers for pages_Purple 1 - Elements 1

Operation Red Horizon

Join Team Phoenix cyber task force and investigate a coordinated cyber campaign threatening critical infrastructure in HTB Enterprise Season 1.

Begin Your MissionBook A Demo

The first enterprise season is here

From standalone training to a connected mission.

For years, HTB Enterprise has delivered exclusive Machines, Sherlocks, and Challenges every month. With Enterprise Seasons, those same hands-on scenarios are now connected through a single, evolving story.

Each week unlocks a new scenario, giving every learner a shared narrative while preserving the individual, hands-on experience.
 
Over the next three months, you'll uncover Arodor's proxy network through weekly Challenges, Sherlocks and Machines… all connected by one evolving mission.

 

 

HTB Enterprise vs. HTB Labs Seasons

Enterprise Seasons borrow the concept of Seasons, but not the purpose. Instead of competing on leaderboards, learners progress through a shared mission designed to encourage cross-functional engagement and build organizational readiness.

Feature / Focus HTB Enterprise Seasons HTB Labs Seasons
Target Focus Organizational readiness Individual competition
Scoring & Tracking No leaderboard Leaderboards
Team Dynamic Shared mission Personal rankings
Participation Model Cross-functional engagement Community play
Narrative & Structure Story drives the training Story supports gameplay

The story

Zenium, Arodor, and the flight for Vitalium

1080x1350-1

Welcome to 2244. Earth is recovering from the aftermath of the Dark War. Critical infrastructure is fragile. Trust is disappearing. Arodor is quietly sabotaging the systems humanity depends on. As a member of Team Phoenix, you'll investigate attacks against critical infrastructure, uncover proxy operations, secure the supply chain, and protect humanity's most important mission.Meet Team Phoenix

    Meet Team Phoenix

    Three Acts. Twelve weeks. One mission

    Act 1: Gridfall Signals

    Toggle

    Arodor’s opening move against critical infrastructure. Grid faults that aren’t accidents, an emergency pipeline under quiet siege, and a first strike back at the operators pulling the strings.

    Challenge: Safety Off ✅

    Sherlock: PolarPlunder ✅

    Machine: Zeek ✅

    Act 2: Proxy Crow

    Toggle

    Act 3: Window Zero

    Toggle

    Frequently Asked Questions (FAQ)

    Will there still be exclusive content releases on HTB Enterprise Platform?

    Instead of releasing monthly exclusive Machines, Sherlocks, and Challenges, we are introducing Seasons. Still exclusive to organizations but wrapped around a story.

    The goal is to help your team increase engagement by discussing scenarios, comparing findings, and building cross-functional awareness.



    How is it different from HTB Labs Seasons?

    Lab Seasons are built around individual completion and leaderboards. Enterprise seasons are built around organization readiness. The focus isn’t on competing against each other but on preparing teams to respond to modern, cross-domain threats.

    Do I need a separate subscription for this?

    No, this is regularly released scenarios for all organizations on HTB Enterprise.

    How often are scenarios released?

    We release 3 scenarios a month. We publish them on a weekly basis excluding the first week of each month.

    Can I explore content independently, or must an admin assign it?

    Yes, you can. Either your admin will assign the released scenarios to a space, or you can access the announced scenarios of Operation Red Horizon through the HTB Enterprise Content Library.

    The Red Horizon Universe Glossary

    Dark War: Eight decades of rationing, blackouts, and deniable conflict that left Earth’s infrastructure fragile and trust damaged.

    Armistice: The agreement that stopped open fighting, but did not stop covert operations and proxy campaigns.

    Vitalium: A Martian resource that can restore large-scale energy, water recovery, and medical production, making it the key to Earth’s recovery.

    Zenium: A democratic coalition focused on keeping systems running and distributing recovery resources broadly.


    Arodor    : An authoritarian bloc focused on controlling scarcity, deciding access, and using dependency as power.

    Phoenix: Zenium’s mission cyber task force responsible for protecting the Mars program’s trust, control, and launch readiness.

    Operation Blackout: Arodor’s proxy campaign that uses timed disruption and misinformation to break public trust and force political submission.

    Proxy Operators: Deniable third-party groups, contractors, or brokers used to carry out attacks without direct attribution.

    Orbital Ground Segment: The systems on Earth that manage satellites and mission operations, including command scheduling, uplinks, and telemetry handling.

    Uplink Authority: The trusted control path for sending commands to orbital assets, including the permissions, validation, and routing that prove who is in control.

    Trust Chain: The integrity of signed updates, identities, approvals, and logs that allow Zenium to prove what happened and prevent stealth control.

    Legitimacy Warfare: Using rules, audits, procurement gates, and official paperwork to block or control operations without firing a shot.