Everything we've shipped

Twenty browser-based labs covering X.509 certificates, certificate chains, OCSP/CRL revocation, PKI hierarchy design, TLS 1.2/1.3 hardening and handshakes, mutual TLS, hashing, HMAC, AES-GCM, RSA/ECDSA signatures, JWTs, password storage, key lifecycle, Certificate Transparency and entropy — real crypto in your browser, graded.

New pillar hubs for Cryptography, OT/ICS, AI security and PCI/compliance, plus an /llms.txt index and plain-text versions of every blog post so AI assistants can find and cite PlayCISO.

A self-assessment scoring how likely a cyber incident could push your business toward insolvency, across the five death-spiral dimensions — with real case studies and a plain-English verdict. Runs in your browser.

A full OT/ICS suite — Purdue model builder, IEC 62443 SL calculator, ATT&CK-for-ICS builder, protocol explorer, conduit linter, exposure analyzer, plus PLC-tamper, Modbus-range, SIS-defense and alarm-flood labs.

Pick an industry, toggle the ten components your AI system actually has, and get an editable STRIDE threat register for every trust boundary — mapped to the OWASP Agentic AI, LLM, MCP and AppSec Top 10s, with a heatmap and PDF export.

Compressors for PDFs and MP4s up to 150MB (3 free runs with a free account), with malware screening, structural checks and 7-day re-download links.

Interactive reference architecture for AI agent identity, runtime guardrails, and trace-first observability — click through all 9 components and self-score your maturity.

A visual knowledge graph connecting APT threat actors to suspected origins, target sectors and target regions — drawn only from sourced vendor research.

A curated feed of APT, ransomware and malware research from major vendors, filterable by category, actor, origin, sector, region, confidence and date.

Real, cited cyber-insurance market data — incident cost by revenue band, premium trends, loss ratios. No invented per-control discount formula.

Two fictional clients submit real-looking documents with real, planted gaps — read them like an auditor and see how many you actually catch.

A live AI avatar interviewer across 7 security roles, tuned to the country you are interviewing in.

Pitch a security budget to a live simulated CFO who pushes back on every number, then get graded across six dimensions.

Face a live AI press corps after a breach disclosure and get graded on clarity, honesty and composure.

Reference security architectures explorable across 8 dimensions — trust boundaries, data flow, control flow, RACI and more.

Fast, free security mini-games: contain a breach, triage SOC alerts, patch a fleet, hunt threats through a 3D network.

A competitive weekly budget-siege — same board as your peers, a live leaderboard, and challenge links.

A live SOC case queue of 200 alerts across 20 attack categories, including AI-era attack surfaces.

Scored readiness assessments and board-ready calculators — PCI DSS, NIST CSF 2.0, Essential Eight, ransomware, cyber insurance and more.

Hand-picked, genuinely free security & AI courses and certificates, grouped by role.

Stock performance of 30+ public companies in the days, months and year after a disclosed breach.

A live AI QSA interview covering scope, segmentation, access control and more, with a downloadable readiness report.

A free privacy-awareness hub for teenagers — interactive tools and a friendly AI privacy chat.

Cut 10% from a randomised $50M–$80M security program, then live with the consequences for a year.

A free directory of 140+ cybersecurity APIs, filterable by category and pricing, updated weekly.

A working inbox with 50 emails, 10 of them hostile — spot the phishing without over-flagging the rest.

A live ransomware incident played across three simultaneous chat windows, graded on the decisions you actually made.