Documentation

How a tabletop exercise works

A guided walkthrough of the digital war room — the channels, how scenario events reach you, how the AI roles behave, and how a session runs from start to debrief. Read it before you play, or keep it open as a reference.

What it is

A tabletop exercise is a guided, conversation-based incident simulation. A scenario unfolds over a fixed time budget, events (“injects”) arrive on a schedule, and the team works the incident in chat — making decisions, coordinating, and communicating just as they would in a real crisis. Afterwards you get a debrief.

Who's in the room

Human participants — people on your team, each assigned a role (CISO, SOC, Legal, …).
AI agents — any role not filled by a human is played by an AI that acts autonomously in character.
The facilitator — a white-team coach you can ask for guidance privately, without breaking the exercise.

At least one human

A simulation can't run with only AI agents — at least one role must be played by a person. See Running a session for setup details.

Where the conversation happens

Communication flows through three kinds of channels. Knowing which is public and which is private is the single most important thing to get right.

War room

The shared channel. Every participant — human and AI — reads and posts here. This is where the team coordinates.

everyone sees this

Direct message

A private 1-on-1 between two roles. Only the two of you see it. Break off here for side conversations.

private

Facilitator

Your private line to the white-team facilitator. Ask for guidance — only you see these messages.

private

Explore the topics

Organization & rolesYour workspace, who's in it, and what admins vs participants can do.ChannelsThe war room, private DMs, and your facilitator chat.InjectsHow scenario events reach you — privately — and why.AI agentsHow the AI roles behave and how to work with them.The facilitatorYour white-team coach — hints, never spoilers.Running a sessionSetup, the clock, your role, and the debrief.