Why TableTop Sim
Practice should feel closer to the incident than to the training room
TableTop Sim was built by people who have facilitated exercises the hard way — a deck, a spreadsheet of injects, a stopwatch, and a week of writing up afterwards. The platform is the version of that job we wanted to do instead.
The problem
What goes wrong with slide-deck tabletops
None of these are facilitator failures. They are limits of the tooling.
The deck reads the room
In a slide-led tabletop, everyone sees the same information at the same time. Real incidents are asymmetric: the CISO knows one thing, legal knows another, and comms is guessing.
No clock, no pressure
Without timers and staged releases, participants deliberate at a pace they will never get on the day. Decision quality under time pressure is the thing worth practising.
The script wins
When the room heads somewhere interesting, a fixed deck drags it back. The valuable moments are the ones the facilitator did not plan.
The report arrives too late
Findings written up a week later lose the room's own language. The report should be built from what people actually said, while they said it.
Our approach
Four principles the product is built on
Asymmetric by default
Information is scoped to roles, because that is how incidents actually feel from the inside.
The facilitator stays in charge
AI suggests; the facilitator decides. Nothing reaches the room without approval.
Evidence, not vibes
Decisions, timings and responses are captured as they happen and become the deliverable.
No fear-mongering
Exercises are for building judgement and muscle memory, not for scaring executives into a budget line.
Mission
Make readiness something a team can rehearse, not just document
Policies and playbooks describe intent. Exercises reveal whether the intent survives contact with a real decision, a real clock, and a room of people with partial information. Our job is to make that rehearsal easy enough to run often, and serious enough to be worth running at all.
Plan. Practice. Protect.
Built for facilitators and security leaders — vCISOs, MSSPs, internal security teams and advisory practices running exercises across multiple organizations.