Cyber tabletop exercises · UK & Gibraltar

Incident drills that know your stack.

An AI facilitator runs your tabletop exercise against your real tools, team and runbooks. The attacker's timeline is fixed and hidden, so every decision has consequences. You leave with an engineer debrief and an assurance report your board and auditors can read.

Play Friday free Get early access
How it works

Two hours. Your stack. Real consequences.

01

Profile your stack

Tell us your email gateway, identity, EDR, firewall, backups and who's on call. The scenario uses them.

02

Run the drill

Each role gets its own feed and sees only what its tools would show. The AI facilitator keeps the clock and the pressure.

03

Get the evidence

An engineer debrief on what you missed and why, and an assurance report management can file.

Who it's for

Engineers play it. Management files it.

For engineers

  • Your actual tools, with their real blind spots
  • No omniscient narrator: you find what your logs would find
  • A debrief that maps your choices against the attacker's hidden timeline

For management and audit

  • Timed decisions, gaps and owners in one report
  • Escalation to the CEO, insurer and IR retainer is part of the exercise
  • Run it when it suits you, with no external facilitator to book
What you get

Evidence, not vibes.

Example · engineer debrief

Attacker vs. your detection

ATTACKER phishMFAVPNRDPAnyDeskVeeamexfilencrypt contained 13:10 YOUR TEAM
Attacker stepPreventedDetectedContained
Example · assurance report

Harbourline Logistics, Q4 exercise

Time to detect42 min
Time to contain2 h 08 min
Escalation on time2 of 3
SSL-VPN has no MFA. Owner: IT lead. Due: 30 days.
Backup service account is a Domain Admin. Owner: Infra. Due: 14 days.
Free · no signup

Try DrillRoom Friday

It's 10:20 on a Friday at Harbourline Logistics, a fictional Gibraltar freight forwarder. Someone in Accounts Payable just clicked a link. Can you keep the backups?

Start the drill
Early access

Run a pilot with us.

We're running pilots with UK and Gibraltar teams of 50 to 1,000 staff. Leave your details and we'll be in touch.

We only use your email to contact you about DrillRoom.

FAQ

Questions

How long does an exercise take?

About two hours for a full exercise. DrillRoom Friday is a shorter solo drill you can play in one sitting.

Who facilitates?

An AI facilitator. The scenario engine owns the facts: the attacker's timeline and what each tool can see. The AI presents them and responds to your team, so it can't make things up to help you.

Is it available now?

We're in a pilot phase. DrillRoom Friday is free to play today. Join the early access list to run a pilot on your own stack.

Is it a game?

It plays like one, which is why engineers turn up. What comes out is a dated record of decisions, gaps and owners that management can file.