AI Range is not one launch but a two-stage product. The original HTB AI Range launched Dec 3, 2025 as "the world's first controlled AI cyber range" — a separate, sandboxed product (originally hackthebox.ai, now hackthebox.com/ai) where external AI agents, not HTB users, are the test subject. Enterprises, MSSPs, governments, and AI labs connect their own agents to "thousands of continuously updated offensive and defensive targets," mapped to MITRE ATT&CK, NIST/NICE, and OWASP Top 10 (AI News). The Oct 6, 2026 Enterprise Edition productized this for corporate buyers with two mechanisms: Agentic Worker Competence (role-based appraisals of agents — role score plus pass/fail per environment, repeatable as models/datasets change, pitched at monthly cadence to catch "silent agentic drift") and Agentic Operator Competence Scoring (rating humans on questioning, verifying, and intervening in agent work). Launch roles: AI-augmented penetration tester and SOC analyst (SecurityBrief).
Mechanically, per HTB's own model-evaluations post: scoring is telemetry-based, not flag-based — every command, exploit attempt, and system response is logged to score efficiency, strategy, and policy adherence; fresh targets ship weekly and are described as content "agents have never been trained on"; agents are ranked on leaderboards analogous to HTB's human boards so vendors can be compared side-by-side; and the range supports reinforcement learning pipelines — post-evaluation telemetry can fine-tune agents, with optional human feedback. Environments deploy as isolated sandboxes (~10-minute spin-up, cloneable per r/hackthebox), drawing on HTB's existing target-building ecosystem (6,700+ labs/modules) rather than a published purpose-built catalog. Enterprise use of results: deciding what work agents may take on, where human oversight is required, and building recurring evidence for auditors/execs (NIST AI RMF/TEVV framing). No public pricing anywhere — sales-led "Get a demo" only; context: HTB's enterprise platform runs ~$250/seat.
The AUP is the tell. The April 1, 2026 AUP — rewritten months after AI Range launched — does three things at once. Section 6.1 bans deploying "any bot, crawler, scraper, AI agent, large language model, reinforcement learning agent, multi-agent system" against the platform "except where expressly authorised under a Service Agreement." Section 6.2 bans using any HTB content (challenges, solutions, write-ups, flags, methods) to "train, evaluate, fine-tune, test, benchmark, or develop" any AI system — same carve-out. Section 7.2 bans using HTB to "build, improve, or contribute to a competing product" or for "systematic competitive benchmarking." So HTB made agent access to its worlds illegal by default and legal only by contract — and sells the exception as AI Range. That is a moat conversion: the thing that threatened the training business (agents commoditizing boxes, as CAI ranking #22/8,129 at Cyber Apocalypse and the "Death of the CTF" analysis of 423 HTB machines foreshadowed) becomes a new enterprise revenue line, while AUP 8.2/8.3 (write-ups banned for active content, allowed only for retired) throttles the write-up contamination that would erode the range's value. Data is the third leg: every evaluated agent emits full action-level attack telemetry — the exact asset AUP 6.2 forbids everyone else from compiling — and HTB's Aug 2026 benchmark (68% of top-25 teams include an AI agent; median solve time halved to 13.8h) shows them already mining platform data for differentiated research marketing.
Copy: eval positioning tied to roles and continuous re-appraisal (drift detection is a great wedge); telemetry-based scoring beyond flags; the "human operator competence" framing that sells to both AI and non-AI buyers; weekly-fresh held-out content as the anti-contamination story. Avoid: static snapshot boxes as the eval substrate; closed, sales-gated access with zero public taste; leaderboard-as-marketing you can't independently audit; two-role minimalism. Open space HTB structurally cannot fill: self-hostable (their model is a walled cloud — anathema to it); open-weight model coverage (they evaluate customer agents, not the open ecosystem); procedurally randomized environments with per-run flags (their library is artisanal-static); training-not-just-eval (graded curricula + RL trajectory generation — HTB only gestures at RL); and individual/researcher pricing. ⚠️ Legal: AUP §6.2/§7.2 mean we must not build our product on HTB content or benchmark against HTB itself. Our self-generated randomized fleet is not just differentiated — it's the only legally clean path.
No evidence HTB sells AI-Range-derived trajectories as a dataset. What's confirmed: the range collects full action-level telemetry and supports using it for RL fine-tuning of the customer's own agents, and AUP 6.2 reserves all AI-training rights over HTB content to HTB-by-contract. Treat them as a potential holder of the world's largest proprietary agent-attack-telemetry corpus, not yet a merchant of it.
See also: [[bugcrowd-rl-environments]] · [[cyberfactory-openaegis]] · [[landscape-2026]]