Questions before your first exercise.

Cyber Ambush is a cloud-based tabletop exercise (TTX) platform. It replaces static slides with a real-time clock, structured roles, and artificial intelligence (AI) supported after-action reviews (AAR) for incident response rehearsals.

Organizations testing incident response plans — including security teams, information technology (IT) leadership, legal, and executives.

Slide-based exercises are static and slow to score. Cyber Ambush uses a live clock, adapts scenarios in real-time, and generates automated reviews immediately after the end of exercise (ENDEX).

Executive Sponsors set scope; Operators facilitate and pace injects; Participants respond; Evaluators/Observers watch and score without playing.

Demo mode previews scenarios without recording. Live mode runs full exercises with Participants and generates after-action reviews.

Minutes. Real-time data capture allows for immediate AAR generation after ENDEX. That first version is an AI-drafted review for timely situational awareness; it has not been reviewed by legal counsel and is not the final, fully vetted and verified AAR.

No. AI only supports Sponsors and Operators to ensure Participant responses reflect real judgment without assistance.

No. It runs in your browser. Every person signs in with their own account and an authenticator app; Participants are seated by invitation, or with a six-character join code if they already have an account.