Incident Response Simulator
Pick Your Crisis Each scenario is a branching tabletop you work from three seats as it escalates. Your decisions compound, the intel is incomplete, and the clock never stops. Choose one to begin.
Insider Threat
Notice Period A departing engineer is moving data he should not be. Catch it, prove it, and survive the politics.
Insider Threat DFIR Disclosure
Start scenario Ransomware
Blast Radius Double-extortion ransomware detonates on a Saturday night. Contain it, recover it, and decide whether to pay.
Ransomware DFIR Recovery Ransom & OFAC
Start scenario Business Email Compromise
Pending Wire A $1.8M payment just left on a forged banking change. The mailbox has been read for two weeks. Get the money, evict the ghost, and decide what to disclose.
BEC Wire Fraud Email Security Insurance
Start scenario Supply Chain Compromise
Trust Anchor A trusted monitoring vendor shipped a signed backdoor to 412 of your systems. You cannot patch their code. Decide how hard to assume the worst, and how much to trust them next.
Supply Chain Third-Party Risk Threat Hunting Vendor Trust
Start scenario More scenarios in development. Each plays differently and grades differently.