10% off sitewide until 31st August
Our Play to Learn sessions combine cybersecurity games with professional facilitation to get teams actively exploring security challenges together.
Our current specialist focus is Threat Modeling, helping developers, architects, testers and product owners identify threats, challenge assumptions and think about what could go wrong while systems are still being designed.
Threat Model software systems using STRIDE
Get your engineering team actively identifying threats against a system architecture through one of the best-known Threat Modeling games.
Available with expert facilitation, including sessions with the game's creator, Adam Shostack.
Threat Model AI and machine-learning systems
Help teams explore the distinctive security threats that arise when designing and deploying machine-learning systems.
Professionally facilitated by CyberSec Games and experienced practitioners.
Our in-person sessions combine a short, engaging training exercise, a sample scenario, and a full set of cards ready to go.
You don’t need any prior experience, just curiosity and a willingness to join in. The format is relaxed, practical, and genuinely fun. You’ll explore threats, discuss options, and see how the game helps engineers think more clearly about security.
Remote doesn’t mean second best. We’ve developed Croupier to bring the best game experience online. Before the session, each player receives the game deck by post. Then, using Croupier, random hands are dealt to each player, who selects their hand from their own deck, all ready to play when the session begins on zoom.
No clunky interfaces. No screen fatigue. Just players talking, thinking, reacting to the shared system architecture, with real cards in their hands. You can read the room, spot who's ready to contribute, and keep the game flowing naturally.
This case study is based on the account of Max Alejandro Gómez-Sánchez Vergaray, AppSec & DevSecOps Consultant, who designed and led an application security programme during the digital transformation of...
As part of its ongoing commitment to secure product development, GEA is aligning its automation teams with IEC 62443-4-1, the standard for secure development lifecycle processes in industrial automation and...
Admincontrol provides secure software platforms for board management and confidential document collaboration. The company evolved its threat modelling practice by introducing OWASP® Cornucopia. This case study explores how a structured,...
The Challenge LogMeIn’s security teams observed that certain types of systems benefit less from traditional threat-modelling workshops. Components that appear simple in purpose, are operated by trusted administrators, or are...
Based on the original article, “Threat modelling at the FT”, published by FT Product & Technology on Medium. In this case, the Financial Times described how it embedded structured threat modelling...
Hands-on Security
Addressing security through physical games
Worldwide Shipping
Breaking through barriers for customers everywhere
Fully Custom Games
For your unique cybersecurity challenges