CISO Simulator — a free cybersecurity tower-defense game
You run security for one company, for one day. Choose your company, spend a fixed budget on controls, defend three uplinks, and keep the business alive until the board meeting. A session takes about 22 minutes in a desktop browser. No install, no login, free.
What makes it different
- Attacks are driven by real exploitation observations from the Shadowserver Foundation honeypot network, supplied through ZeroDayClock.
- Three companies of increasing difficulty: Nordlicht Labs, Halden Logistics and Meridian Financial Group.
- Every run produces a comparable score, published on a publicly verifiable scoreboard.
- You can load your own SIEM export — Elastic, Splunk or Sentinel — and play your own bad day.
Who plays it
CISOs, security leaders, SOC analysts and security-awareness trainers, plus anyone who wants to feel the trade-off between budget, controls and incident response without the career damage.
This game needs JavaScript. Enable it to play, or read the source and design notes on GitHub.