Train for the CISO seatand the job after it.
You work through 17 years of incidents modelled on breaches that actually happened, then you have to defend your calls to a board and sit a mock interview that grills you on the rules in your own region. It's about as close to the job as you can get before someone hands you the job.
$5 a month or $40 for the year. Cancel whenever you like.
What's new
See everything we've shippedTwenty free, browser-based labs covering X.509 certificates, certificate chains, OCSP/CRL revocation, PKI hierarchy design, TLS 1.2/1.3 hardening and handshakes, mutual TLS, hashing, HMAC, AES-GCM, RSA/ECDSA signatures, JWTs, password storage, key lifecycle, Certificate Transparency and entropy — real crypto in your browser, graded.
New pillar hubs for Cryptography, OT/ICS, AI security and PCI/compliance, plus an /llms.txt index and plain-text versions of every blog post so AI assistants can find and cite PlayCISO.
A free self-assessment scoring how likely a cyber incident could push your business toward insolvency, across the five death-spiral dimensions — with real case studies and a plain-English verdict. Runs in your browser.
A full OT/ICS suite — Purdue model builder, IEC 62443 SL calculator, ATT&CK-for-ICS builder, protocol explorer, conduit linter, exposure analyzer, plus PLC-tamper, Modbus-range, SIS-defense and alarm-flood labs.
Which seat are you in?
Same product, three different first moves. Pick the one that sounds like Monday morning.
You want the CISO job — or the interview for it.
Score yourself first, then drill the mock interview until your incident story, budget defense, and regulatory answers are automatic.
Start with the free scorecard →You run security — and the board runs you.
Rehearse the worst day before it happens: live incidents graded against real-world regulatory expectations (US-oriented), and a board-report coach for the write-up.
Take a War Room run →You build and review the systems.
Threat-model on an infinite canvas with an AI copilot, blueprint architectures with live control coverage, and scan what you ship.
Open the architect studios →What PlayCISO is, in plain words
PlayCISO is a practice platform for security leaders and the people who want to become one. You run 25 incident scenarios across 3 fictional companies, each one modelled on a breach that really happened. Every decision is graded against real regulatory frameworks, and a board of AI executives questions your calls at the end.
The same subscription includes a live mock interview with an AI avatar across 7 security roles and 6 industries, a board report coach with 3 writing modes, and 3 architect studios for threat modelling, architecture design and design review. It also bundles 5 security scanners for packages, prompts, MCP servers, models and browser extensions, plus an AI bill of materials generator, 25 templates and more than 120 reference architecture diagrams.
Pricing is $5 a month or $40 a year, and every plan is the whole product. The 2-minute CISO readiness scorecard, 25 templates, 5 arcade games and the sample outputs are free without an account. Under-13s can only use the youth pages with verified parental consent. Scenarios and companies are fictional; nothing here is legal advice.
A quick look inside.
Six surfaces, five seconds each. Every scenario is fictional — inspired by real-world incidents.
Isolate the runner and burn the release window — or trust the WAF rule and ship? You have 42 seconds.
Three things you can only get good at by doing them
Reading about incident command is not the same as running one at 2am. So we let you run one.
Three security-architect studios
Infinite-canvas tools with an AI copilot: you draw, it proposes, you dispose — then export. Threat modeling, architecture design and design review, each on its own canvas.
3 canvases, 3 engines, 1 AI copilot. Every studio exports a PDF; the architecture studio also exports Terraform.
Five security tools, included
Five is the promise — we built them, we use them ourselves, and they come with every subscription. There's more in the box on top of that (AI BOM, a market-aware resume review, and AI SVS as it ships), but the five are what you're paying for.
npm/PyPI trust, typosquat distance, and CVE check.
Static prompt-injection & jailbreak detection.
Static audit of your MCP server config.
Adversarial probes against your model endpoint.
Chrome extension permission + risk scoring.
Turn a manifest into an AI bill of materials.
Market-tailored AI critique of your resume.
AI verification standard — in development.
More ways to practice
7 more ways to practice, 3 of them free with no signup.
Survive a $4M budget cut, beat your peers on the weekly board.
Face hostile reporters after a breach — live, on the podium.
A 2-minute readiness scorecard that shows where you stand.
Live avatar interviewer, US-oriented, 7 roles.
8-dimension reference architectures to study.
Fast security mini-games — breach, patch runner, SOC.
See real board reports and critiques before you pay.
The threat pulse
week 2026-W43-engagedWhat we're watching — the incidents shaping what the War Room throws at you. From the weekly PlayCISO briefing.
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single compromised device on a Tailscale network can escalate to root access on reachable servers when SSH port forwarding is enabled. Attackers need both the misconfigured SSH and a foothold on the network.
Source →PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors used AI platforms to automate post-exploitation after exploiting PHP2Shell vulnerabilities (CVE‑2026‑109618/109619) against a European government agency. The campaign includes widespread scanning and the use of agentic AI for further intrusion.
Source →Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
A master key for LiteLLM was accidentally pushed to a public GitHub repo in May 2026, allowing attackers to push a malicious package and steal repository tokens. The leak impacted CI/CD pipelines that rely on LiteLLM for LLM API calls.
Source →Subscribers get this every week — with the AI developments and the one stat worth repeating. Take the free scorecard and it lands in your inbox.
Everything inside
The whole product on one screen: 70+ tool pages, 25 templates, 120+ diagrams and 100+ blog posts. Green means free right now; everything else comes with any plan.
- War Room simulator17 years of incidents, graded by a board
- Board Report coachGenerate, write live, or get critiqued
- Mock interviewAI avatar · 7 roles, US-oriented
- Press conferenceFace the journalists after the breach
- Threat Model StudioDraw or paste a URL → STRIDE map
- Architecture StudioBlueprints with live control coverage
- Design Review WorkbenchRFC in, triaged findings out
- Org DesignerTeam, budget, KPIs, JDs — from scratch
- Attack Path SimulatorWatch a breach move, hop by hop
- Risk RegisterEvery studio's risks, board-ready
- Cyber PMO10 project packs: case → plan → RAID
- 5 security scannersPackages, prompts, MCP, models, extensions
- Resume reviewMarket-tuned, ATS-aware critique
- AI BOMCycloneDX inventory of your AI stack
- 120+ diagrams8-dimension interactive walkthroughs
- CISO-readiness scorecard2 minutes, score + 30-day plan
- Watch a run + make a callGet graded on one live decision
- 25 templatesArtefacts, policies, processes, audit
- Cyber Arcade5 games that teach real security
- Sample outputsSee what you get before paying
- Live statsReal activity, updated live
Every plan is the whole thing
There's no stripped-down tier. Go monthly if you're building up over time or prepping for an interview, yearly if you're in this for the long haul. You get the same product whichever you pick.
Cancel anytime · 7 bonus days on every plan · no lock-in
Got a team? From $3.50/seat/mo — 5+ seats, 30% off, self-serve checkout.
See all plans & team pricing