Get 15% off for Cybersecurity Awareness Month. Use code CYBERREADY15. Explore ideas
Our facilitated threat modeling sessions give teams hands-on experience using our cybersecurity games to explore a sample system architecture, identify potential threats and record their findings.
Designed for developers, architects, testers and product owners, these sessions demonstrate how our games make threat modeling more accessible, engaging and collaborative.
Threat Model software systems using STRIDE
Get your engineering team actively identifying threats against a system architecture through one of the best-known Threat Modeling games.
Available with expert facilitation, including sessions with the game's creator, Adam Shostack.
Threat Model AI and machine-learning systems
Help teams explore the distinctive security threats that arise when designing and deploying machine-learning systems.
Professionally facilitated by CyberSec Games and experienced practitioners.
Our in-person sessions combine a short, engaging training exercise, a sample scenario, and a full set of cards ready to go.
You don’t need any prior experience, just curiosity and a willingness to join in. The format is relaxed, practical, and genuinely fun. You’ll explore threats, discuss options, and see how the game helps engineers think more clearly about security.
Remote doesn’t mean second best. We’ve developed Croupier to bring the best game experience online. Before the session, each player receives the game deck by post. Then, using Croupier, random hands are dealt to each player, who selects their hand from their own deck, all ready to play when the session begins on zoom.
No clunky interfaces. No screen fatigue. Just players talking, thinking, reacting to the shared system architecture, with real cards in their hands. You can read the room, spot who's ready to contribute, and keep the game flowing naturally.
This case study is based on the account of Max Alejandro Gómez-Sánchez Vergaray, AppSec & DevSecOps Consultant, who designed and led an application security programme during the digital transformation of...
As part of its ongoing commitment to secure product development, GEA is aligning its automation teams with IEC 62443-4-1, the standard for secure development lifecycle processes in industrial automation and...
Admincontrol provides secure software platforms for board management and confidential document collaboration. The company evolved its threat modelling practice by introducing OWASP® Cornucopia. This case study explores how a structured,...
At LogMeIn, threat modelling had become a regular part of the development process. But some systems could still be difficult to challenge effectively. The problem was not necessarily a lack...
Based on the original article, “Threat modelling at the FT”, published by FT Product & Technology on Medium. In this case, the Financial Times described how it embedded structured threat modelling...
Hands-on Security
Addressing security through physical games
Worldwide Shipping
Breaking through barriers for customers everywhere
Fully Custom Games
For your unique cybersecurity challenges