Cyber Tabletop Exercises, Rebuilt
You're In CMD/
Most cyber tabletop exercises are a slide deck and a polite conversation. CMD is a live crisis. The phone rings. The video call connects. Your decisions change what happens next. And every move is captured as evidence before anyone reaches for a notepad.
The Problem
A Tabletop You Talk Through Isn't A Rehearsal. It's A Meeting.
Annual, deck-driven tabletop exercises feel productive. Everyone nods. Someone takes the minutes. Nothing sticks. Because when a real incident lands, calm conference-room consensus evaporates and people fall back on instinct. If the first time your leaders feel the pressure is during the real thing, you have already lost the first hour.
Why CMD Is Different
Three Things Make It Real
AI Calls That Actually Connect
The phone in the room rings. The video call connects. On the other end is a convincing AI playing the attacker, the panicking supplier, the journalist chasing a story. Your team handles it live, voice to voice, with no script to hide behind.
Decisions With Real Consequences
CMD scenarios branch. Pay the ransom and watch what it triggers. Brief the press too early and live with it. The exercise reacts to the choices your team actually makes, not a fixed timeline, so the pressure is genuine and the lessons land.
Evidence By Default
Every call, message, decision and escalation is captured automatically. At the end you get a full debrief and a role-by-role report, downloadable as one PDF for your board, your auditor or your regulator. No note-taker required.
How It Works
Watch It Unfold
See It In Action
Built To Be Watched, Played And Felt
How It Runs
A Live Cyber Crisis, Run In Your Room
The Command Centre
A trained facilitator drives the incident from a live command centre, firing events, dialling up the pressure and watching every decision land in real time.
Player Devices
Your team plays from their own laptop or tablet, in the browser. They get the emails, the calls, the messages. They make decisions and message each other, exactly like they would on the day.
The Big Screen
The incident plays out on the big screen: the breaking news, the ransom demand, the brief. Everyone in the room feels it tighten at the same moment.
The Mechanic
The Incident Comes At Them
From Every Direction
Each player works from a single inbox, with the whole incident playing out on the big screen beside them. It arrives the way a real crisis does: every channel at once, faster than anyone is comfortable with.
- AI Phone Calls
- AI Video Calls
- Voice Notes
- Decision Points
- SMS
- Breaking News
- Ransom Demands
- Regulator Contact
- Slack
The Real Test
Does It Reach The Right Person In Time?
A crisis is won or lost on the hand-offs. In CMD, players forward and escalate anything they receive to whoever should see it next, building a real chain of command as the incident unfolds.
So you find out whether the phishing report actually reaches IT, whether IT escalates to the CISO, and whether Legal gets pulled in before the regulator does. Or whether it quietly dies in someone's inbox.
Every hop is timestamped and captured, with the note attached at each step. How the team routed the threat lands in the debrief and the report, so good and bad escalation becomes evidence, not a guess.
Who It's For
Built For The People Who'll Be In The Room On The Day
A real incident is never just the security team's problem. CMD is built for everyone who ends up making the calls when it counts.
- Executive & Leadership Teams
- CISOs & Security Leads
- Incident Response Teams
- Legal & Compliance
- Comms & PR
- IT & Operations
FAQ
Questions, Answered
Is this just a tabletop exercise?
It's a tabletop exercise the way a flight simulator is a slideshow about flying. Same goal, completely different experience. Real calls, real pressure, real consequences.
Do the phone and video calls really happen?
Yes. The phone rings and the video call connects for real. There is a convincing AI on the other end playing the attacker, the supplier or the journalist, and your team has to handle it live.
Who runs it?
A trained facilitator drives the whole exercise from the command centre. That might be our team, one of our delivery partners, or a facilitator from your own organisation. You bring the players, the platform brings the crisis.
Do we need our own scenario?
No. Choose from our growing scenario library, or we will tailor one to your sector and the risks that actually keep you up at night.
What do our players need?
Any device with a browser, a laptop or a tablet, whatever they have to hand. Nothing to install.
What do we walk away with?
A full debrief of every decision, message and call, plus an AI-written, role-by-role report. Download it as a single PDF for your board, your auditor or your regulator.
Find Out How Your Team Performs Under Real Pressure
Before an attacker arranges the test for you.
Request a Demo