Incident tabletop · AI facilitator
Rehearse your worst day with an AI facilitator. Walk away with a scorecard, a leadership summary, a playbook, and a report you can hand your insurer. Free to start, no login.

Read the field guide →
What you walk away with
Documents a self-directed exercise; not an insurer approval or certification.
Scorecard
78/100
For your leadership
Three things to fix this quarter
Playbook
First 60 minutes
Insurer summary
Your logo, your brand
NIST CSF · ISO 27001 aligned
How it feels
Dry Run Ready reads the crisis aloud and you answer out loud. Spoken answers are scored exactly like typed ones — no keyboard needed.
Try a drill freeFacilitator
It's 6:40 a.m. Your file server shows a ransom note. What's your first call?
You (spoken)
Disconnect it from the network and phone our IT lead.
Consultant or advisor? Run exercises for all your clients under your own brand.
See Enterprise →Available drills
A client says they received an invoice from you with new bank details. You didn't send it.
~10 min
You face a severe storm warning with staff still on site and a client delivery due today. You must choose safe shelter or safe closure without sacrificing clear accountability for people and commitments.
~12 min
Your sole key supplier loses its warehouse to a fire and cannot deliver for weeks. You must protect customer commitments and cash while resisting unverified substitutes and impossible promises.
~12 min
An offensive post from your own business account is spreading, and it is a genuine posting mistake, not a hack. As a solo operator, you must take responsibility, limit harm, and keep customer service running under scrutiny.
~10 min
Your key person is hospitalized. An urgent client deadline and a locked password vault expose continuity gaps.
~12 min
A fire next door forces an evacuation. People are unaccounted for and the building will be closed for days.
~12 min
A trusted employee is viewing client records they have no work reason to see, and they just gave notice.
~12 min
A major utility failure cuts power and water to your premises. Restoration could take a week, and you have perishable stock.
~12 min
A trusted supplier emails new wire instructions. The owner is traveling. The invoice is due Friday.
~12 min
Your payment processor freezes payouts just before payroll. A fake support message offers a shortcut.
~12 min
A departed employee still has a working session, shared secrets, and a recent customer export.
~12 min
A stolen laptop, a suspicious cloud login, and client files you cannot account for.
~12 min
Your checkout fails during a paid campaign. Retried orders may have charged customers twice.
~12 min
Your main cloud provider has a regional outage. Your app and files are unavailable and there is no estimated fix time.
~15 min
You send AI-drafted professional advice that sounds authoritative but is wrong. Your client follows it, loses money, and demands an explanation while another deadline approaches.
~12 min
Your staff member sends a client's personal and financial records to a public AI chatbot. The client discovers the disclosure and demands containment, answers, and accountability.
~15 min
Ransomware spreads to a second system while your backup console and an extortion message complicate recovery.
~15 min
Three customers report the same safety defect. One reports a minor injury, and the regulator may need to hear from you.
Draft scenario · review pending
~15 min
An employee alleges serious misconduct by a director, who wants it to go away. Staff are whispering.
Draft scenario · review pending
~12 min
A server fails and the restore fails too. The backup jobs reported success for months.
~15 min
An AI agent creates an unapproved purchase, then retries through a second tool.
~12 min
A developer finds your customer data on a public paste site. Legal, press, and the board are about to call.
~15 min
You must respond to a serious on-site injury while protecting others and preserving a reliable record. Within hours, you face urgent questions from the employee's family, a safety regulator, and a reporter.
~15 min
A vendor whose software runs on every workstation announces a security incident, and their update system may be compromised.
Draft scenario · review pending
~15 min
The attacker, the worried client, the bank, the regulator. Twists arrive mid-drill.
Every decision is graded against a written rubric, revealed only at the end.
A one-page playbook built from what you actually said. Print it. Pin it up.