2026 CyberSec Game Challenge now open!

Free Delivery on orders above £75 for our US and Europe customers

Backdoors & Breaches: Core Deck

£10.50

Description

Bring incident response training to life with Backdoors & Breaches, the original cyber security incident response card game from Black Hills Information Security, Antisyphon Training and Active Countermeasures.

Designed as a structured, co-operative tabletop exercise, Backdoors & Breaches helps teams practise investigating realistic attack scenarios in a fast, engaging and repeatable format. One player acts as the Incident Captain, secretly building an attack path, while the Defenders work together to identify what happened using detection cards, discussion, critical thinking and a d20 roll.

Bulk Pricing

Automatically applied at checkout:

Buy Discount
5 or more decks 5% off
10 or more decks 10% off
20 or more decks 20% off
30 or more decks 30% off

Outcome

Identify work that needs doing earlier in the project lifecycle. Defuse difficult relationships. Build trust. Bring teams together in peace and harmony.

Specifications
  • Suits
    Initial Compromise, Pivot & Escalate, Persistence, C2 & Exfil, Detections / Procedures, Injects
  • # Cards
    52
  • Created by
    Black Hills Information Security

Why play Backdoors & Breaches for incident response training?

  • 1. Confidence Before a Real Incident

    Give your team a safe way to rehearse cyber incident response before they face a live attack. Build confidence without real-world pressure.

  • 2. Better Security Conversations

    Help players work through evidence, discuss options and choose their next move. It turns response planning into active team decision-making.

  • 3. See How Attacks Unfold

    Explore how incidents unfold across compromise, escalation, persistence and exfiltration. Help defenders connect the dots and investigate attacks with more confidence.

  • 4. Structured Tabletop Exercises

    Reveal weaknesses in logging, detection, tooling, communication and playbooks. Every game creates useful discussion points for improvement.

  • 5. Team-Based Learning

    Turn tabletop exercises into memorable, hands-on learning. Backdoors & Breaches makes incident response practice more engaging, repeatable and fun.

What's in the deck?

The Backdoors & Breaches Classic Core Deck includes 52 cards covering attacks, detections and injects.

Attack cards are split into four stages:

  • Initial Compromise
  • Pivot & Escalate
  • Persistence
  • Command & Control / Exfiltration

By combining these cards, the Incident Captain can create a wide range of realistic cyber incident scenarios for teams to investigate and solve.

How the game works?

  • Choose one player to act as the Incident Captain.
  • The Incident Captain secretly builds the incident by selecting attack cards from the key attack categories.
  • The remaining players act as Defenders, working together to investigate the incident.
  • Defenders choose detection and procedure cards to decide what evidence they want to look for.
  • A d20 roll helps determine whether the investigation succeeds, reveals new information or triggers complications.
  • The team wins by uncovering the full attack path before time runs out.
  • After the game, run a debrief to discuss what was detected, what was missed and how real-world processes, tools or playbooks could be improved.
Download the full instructions

Backdoors & Breaches is a practical way to make incident response training more engaging, more collaborative and more memorable. Whether you are running a SOC exercise, a classroom activity, a cyber security workshop or an internal team session, the game helps people practise the conversations and decisions that matter before a real incident happens.
Back to top