Awareness Library
Interactive security awareness games — including phishing awareness, social engineering, and AI security scenarios — for every threat vector and role. Free to play, no account required.
Timeline Detective
An access governance investigation game. Review employee access histories, role changes, and permission grants, then flag the moments where privilege creep and missing reviews created governance risks.
Inbox Triage
An identity and access management (IAM) simulation. You're the access reviewer — approve, deny, or escalate a stream of requests, knowing the ones you rubber-stamp could expose the entire organization.
Org Audit
An access audit and compliance simulation. Review department access dashboards to spot orphaned accounts, excessive permissions, and segregation-of-duties conflicts before the audit deadline.
Shadow AI
A shadow AI security awareness game. Navigate real workplace scenarios where colleagues want to use AI tools with company data, and learn where the line falls between productivity and data exposure.
Deepfake Detective
A deepfake detection training game. Analyze voice messages, video calls, emails, and texts to determine what's real and what's AI-generated, and learn to catch deepfake attacks before they cost you.
Prompt Injection
A prompt injection security awareness game. Examine AI chatbot interactions and spot the attacks — from obvious jailbreaks to hidden instructions in documents — and learn to defend against the #1 vulnerability in AI applications.
Terminal Roulette
An operations security simulation. A command is staged in a live terminal with a countdown — read the context (hostname, directory, command history) and decide: execute, abort, or flag for review. Not every command is dangerous, but the ones that are can take down production in seconds.
AI Supply Chain
An AI supply chain security training game. Evaluate AI models, MCP servers, plugins, and datasets before integrating them into your stack, and spot trojanized models and backdoored tools hiding behind legitimate-looking registries.
Extension Roulette
A supply chain security awareness game for developers. Swipe through VS Code marketplace listings under time pressure and spot malicious extensions hiding behind fake reviews, cloned names, and suspicious permissions.
BEC: The Compromise
A business email compromise (BEC) awareness game. Navigate a realistic scenario, spot social engineering red flags, and learn how attackers manipulate trust to authorize fraudulent wire transfers.
Coming Soon
Phish or Legit?
A phishing awareness quiz. Analyze emails, links, and landing pages to spot what's real and what's a phish, and train your eye to catch credential-harvesting attacks before you click.
Ransomware Response
A ransomware incident response simulation. Lead your organization through an active ransomware attack — make time-critical decisions about containment, communication, and recovery.
The Insider Threat
An insider threat detection simulation. Investigate suspicious employee behavior across access logs, communications, and data transfers to distinguish legitimate activity from data exfiltration.