Rehearse the bad day. Keep the proof.

Dry Run Ready is a product of Airworthy Advisory, an independent advisory practice. It started as a capstone build and is run as a small, direct operation: the people who answer your email are the people who built it.

Questions, corrections or a scenario you wish existed: dryrun@airworthyadvisory.com.

• 21 published scenarios for solo, small and mid-size organizations, IT and non-IT: ransomware, vendor email compromise, utility outage, evacuation, insider misuse, cloud outage, backup failure and more. Scenarios are adapted to your jurisdiction's terms (US, UK, EU, Canada, Australia).
• Text or voice drills. Type your answers, or run the exercise hands-free with the facilitator speaking each situation.
• Scorecard, leadership summary, playbook, insurer summary. Every decision graded against a rubric revealed only at the end; the playbook is built from what you actually said.
• Library assistant. Cited answers about incident response, exercises, continuity and breach reporting, grounded in 25 official sources (NIST, CISA, ICO, ENISA, ACSC, Ready.gov, OSHA and others). It refuses rather than guess when the library has no source.
• Organization workspace. Drill history, readiness over time, corrective actions, versioned playbooks, client portfolios for consultants, read-only sharing.
• Signals from the outside world. CISA's Known Exploited Vulnerabilities feed tags IT scenarios that are active in the wild; US National Weather Service alerts suggest re-running a storm or outage drill; Telegram alerts tell your team when a drill completes.
• Scenario studio. Write and improve private scenarios of your own.

Your transcript, answers, scores and rubric detail stay inside Dry Run Ready. External services receive only what their job needs: Telegram gets the organization name, scenario, score and a scorecard link; the weather service gets a US zip or county; the vulnerability feed is read-only. Public report links share the insurer summary only, and you can revoke them.

Every AI chat in the product carries the same notice: you are talking to an AI, answers can be wrong, check the cited source before acting. The facilitator never sees the scoring rubric during a drill, and the library assistant answers only from retrieved text above a relevance threshold.

• Not legal, insurance or compliance advice. Reports document a self-directed exercise; they are not an insurer approval or a certification.
• Weather alerts cover US locations for now.
• Standards references (NIST, ISO) describe process alignment, not clause coverage.