Is this a penetration-testing tool?

No. It is a tabletop exercise generator with synthetic event sequences. It does not send malicious payloads or interact with external targets.

Does a high score mean my security controls work?

No. The score reflects selected controls against an illustrative scenario, not tested efficacy or a verified production detection rate.

Synthetic defensive laboratory

Know what your team would notice before an incident.

Choose a realistic scenario, switch defensive controls on or off, then examine fictional event telemetry and the coverage gaps it illustrates. No real target or live system is attacked.

Configure a defensive exercise

Threat scenario

Which safeguards are in place?

Illustrative event stream

Event lines below are fictional training data, not real SIEM logs.

Select a scenario and run the exercise to see sample events.

From simulation to action

Train detection, judgement and escalation.

Exercises support discussion of what a team would notice and how it would respond. They do not test the real effectiveness of security products or measure actual detection rates.

◉

Breach response decisions

Practice the first four stages of a potential customer-data incident.

Explore tool ↗

↗

Staff awareness training

Build on the exercise with the Privacy Needle Play game collection.