A hands-on environment for security innovation
At its heart, the Security Innovation Lab is designed as a dedicated, hands-on environment for security experimentation and development. It provides a controlled, uninterrupted space where new security features developed within the work package can be tested, validated, and refined. Beyond internal development work, it also acts as an incubator for ideas coming from GÉANT project participants and NRENs, supporting experimental setups that would be difficult to realise in production environments.
“Playfulness is key to innovation, and it needs space to thrive. With the GÉANT Security Innovation Lab, we’re creating a place where researchers can safely experiment and turn a spark of an idea into something that lights the way for the cybersecurity community.” Andrej Zieger, DFN-CERT
Built on a flexible technical foundation
The lab is built around a flexible technical foundation: servers, virtualisation platforms, and network equipment connected through a dedicated link to the GÉANT backbone. This setup enables a wide range of use cases, from controlled testing of security tools and analysis equipment to more exploratory, research-driven experiments.
Over the past months, the physical build-out has progressed steadily. The data centre environment has been prepared, with rack space allocated and power and fibre connectivity in place. Recent deliveries of server and optical hardware have allowed the first systems to be installed and brought online. As a result, the lab’s internal network is now operational, supporting early configurations and inter-system communication.
Early connectivity and pragmatic progress
Despite some expected delays in hardware delivery the team has made pragmatic decisions to keep progress moving. Interim connectivity via DFN-CERT has already enabled external access and notably the first machine in the lab is now reachable from the public internet via the GÉANT path. This early connectivity has been an important milestone, demonstrating that the lab is not just a hardware installation, but a functioning experimental platform. The full upstream GÉANT connection is currently in its final configuration phase, replacing the temporary setup. Once complete, it will provide the stable, dedicated backbone connectivity required for more advanced experimentation. In parallel, the arrival of the core router remains a key next step. This component will form the backbone of several upcoming network-focused experiments and is expected to unlock the lab’s full intended scope. Even in its early stage, the lab is already hosting five defined experimental projects, with more ideas emerging from recent 2026 Security Days discussions. One particularly promising outcome is a planned DDoS-related experiment, currently being shaped into what will likely be one of the first full-scale use cases for the new infrastructure.
Looking forward
Looking ahead, the community engagement around the lab is set to grow further. A dedicated session at TNC26 will provide a space to gather new ideas, connect with potential contributors, and explore how the lab can evolve as a shared resource for security innovation across the GÉANT community. For now, the message is simple: the lab is here, it is running, and it is already being used. What comes next will be shaped by infrastructure milestones and, most importantly, by the ideas and experiments it enables.
“I’m very pleased that we’re creating a space to bring together innovative ideas that strengthen cybersecurity across our community. The lab will enable researchers to run experiments in a controlled environment, serving as a virtual playground where technology and people come together.” Alf Moens, GÉANT, Work Package Joint-Lead, GN5-2 WP8
For further information and to reach the team, visit: https://security.geant.org/geant-security-innovation-lab/
Current experiments and updates are available via the GN5-2 WP8 documentation and reports.
