Virtual SOC · Live

Command Deck

Analyst: you triage alerts. Read the signal, collect evidence and decide how serious it is.

Tap a tile to filter the cases below.

AI Securitynovel

10 signals

The ring is a risk score from severity (higher means more urgent). Ready cases are playable end to end; Preview cases are read-only.

75
Support bot returning other customers' data
RAG support assistant leaked another tenant's records after a crafted message.
HIGHSTART HEREFINDINGReady
73
Fraud model accuracy silently degrading
Fraud-detection model started passing a class of fraudulent transactions after retraining.
HIGHFINDINGPreview
94
Autonomous agent making unexpected outbound calls
An internal LLM agent host is beaconing to an unknown external endpoint.
CRITFINDINGPreview
73
Model reproducing internal source code verbatim
The internal code-assistant emits proprietary code it should never surface.
HIGHFINDINGPreview
54
LLM provider bill spiking overnight
A leaked LLM API key is being used for someone else's workload.
MEDINVSTGPreview
87
Embeddings service exposed without auth
The vector database is internet-reachable and returns PII-laden chunks.
CRITFINDINGPreview
75
Voice-cloned CFO authorizing an urgent wire
Finance received a convincing voice call and email chain impersonating the CFO.
HIGHFINDINGPreview
48
Sensitive documents uploaded to an unsanctioned AI tool
CASB flags employees pasting internal docs into an unapproved AI writing SaaS.
MEDFINDINGPreview
46
Customer chatbot coaxed past its guardrails
Users are sharing a jailbreak that makes the public chatbot ignore policy.
MEDFINDINGPreview
92
Automation agent granting itself admin
An ops agent used a legit tool to add itself to an admin group.
CRITFINDINGPreview

How's the SOC so far?

What is the Virtual SOC?

The Virtual SOC is a free security-operations simulator — join as a SOC analyst or incident responder and work real-feeling cases to close.
200 alerts span 20 attack categories, including AI-era surfaces most SOC sims never cover, plus the classic standard domains.
Work each case by reading the alert, gathering evidence, and interrogating the team over chat via AI-driven personas.
Each case runs about 10-20 minutes and ends with a graded close.
No signup is needed to start exploring the case queue.

Frequently asked questions

Is there a free SOC simulator?

The Virtual SOC lets you explore the case queue and start working alerts without an account. It is a SOC simulator: you read the alert, gather evidence, question AI-driven teammates and close the case with a graded result. For shorter drills, try the SOC Log Triage Trainer and the Detection Lab.

What is a cybersecurity simulation?

A cybersecurity simulation is a safe, scripted scenario in which you make the decisions of a defender or incident responder and get feedback, without touching a real system. The Virtual SOC simulates analyst casework; the Cyber War Room simulates leadership decisions during an incident. See also our cyber range guide for live-fire alternatives.

What is the PlayCISO Virtual SOC?

It is a browser-based Security Operations Center simulation where you join as a SOC analyst or incident responder, pick a case from a live queue across 20 attack categories, gather evidence, question the team, and work it to a triaged or closed state.

Is the Virtual SOC free?

Yes. You can browse the case queue and start working alerts for free — no credit card required.

What are the AI-security scenarios?

Alongside classic SOC domains, the Virtual SOC includes "Novel differentiator" categories covering AI-era attack surfaces — the kind of AI-security incidents most SOC simulations never cover — and you investigate them by chatting with AI-driven personas who play the team.

How long does a SOC case take?

Most cases take about 10-20 minutes to work from the initial alert through to a graded close.

Do I need an account to play?

No account is needed to explore the categories and case queue and start working alerts.

More SOC practice: SOC Log Triage Trainer, Detection Lab, Forensics Lab, all labs, SOC analyst career guide and what a cyber range is.

🤖 AI Securitynovel

AI Securitynovel