100 ready-to-run cyber tabletop exercises across 15 incident domains. Search them, pick one at random, or tell us who will be in the room and we'll rank the scenarios that fit those people best. Every exercise shows who to involve, how long it runs and an outline — and the scenario prompt is free to copy and read out.
Running one for real? Pro adds the facilitator's run sheet for each exercise: a minute-by-minute timeline, timed injects, step-by-step facilitation guide and the questions to put to each person. Or build your own with the Tabletop Runbook Generator.
Who's in the room?
Pick the people you have — we'll suggest exercises that fit them.
A release engineer runs a reproducible-build check on tomorrow's release and it fails: the compiled agent your customers install on 40,000 endpoints contains a 3 KB block that is not in any commit. Rebuilding on a clean machine gives a different hash. The build server's scheduled tasks include a script nobody recognises, created five weeks ago. Your last two releases came off the same server and are already in customers' hands. Release is scheduled for 09:00 tomorrow and the sales team has promised the new version to your largest customer.