Cyber exercise consultancy
We design, run and evaluate cyber drills, tabletop exercises and hands-on training, so your leadership, responders and technical teams know exactly what to do when it is real.
Exercises designed with reference to
Services
Every engagement starts from your risks and objectives, not from a template. Pick one format or combine them into an exercise programme.
Facilitated, discussion-based scenarios for executives, crisis teams and incident responders. Realistic injects (ransomware, supply-chain compromise, data leak, outage) test decisions, escalation, communication and legal duties.
Live-fire exercises on an isolated cyber range: your blue team detects, contains and recovers while a red team runs a realistic, threat-informed attack. Measured, repeatable, and safe for production.
Hands-on training for defenders and engineers, and capture-the-flag competitions that build skills and find talent. From a single workshop to a public event with its own platform.
Method
A clear exercise lifecycle: every step produces something you keep.
Objectives, participants, systems and constraints agreed with you. Success criteria defined up front.
Threat-informed scenario, timeline and injects based on your sector and real attacker behaviour.
Expert facilitation and a control cell that adapts the scenario live; observers capture decisions and timings.
Hot debrief on the day, then analysis against the objectives: what worked, what broke, why.
After-action report and a prioritised improvement plan you can track until the next exercise.
Deliverables
Exercises only matter if they change something. Every engagement ends with documents that stand on their own.
Live now
Our capture-the-flag platform is open for registration. Form a team, solve challenges, climb the scoreboard.
FAQ
A tabletop exercise is discussion-based: people walk through a scenario and make decisions, with no systems touched. A cyber drill is hands-on: technical teams defend real (isolated) systems against a live attack. Many organisations start with a tabletop and add drills once roles and playbooks are in place.
No. Tabletop exercises are discussion only, and technical drills run on an isolated cyber range that mirrors the parts of your environment that matter for the scenario.
Yes. Regular testing of incident response and business continuity is expected under both. We design exercises around your obligations and document them so the evidence is ready for audits and supervisors.
It depends on scope. A focused tabletop can be prepared in a few weeks; a multi-team live-fire drill takes longer. We agree the timeline with you during scoping.
All three. Tabletops work well remotely; live-fire drills can run with teams in their own offices connected to the range.
Contact
Tell us what you want to test and who should take part. We reply with a proposed format and next steps.
This form opens your own email app with the message prepared. Nothing is stored on this website.
