HEAD TO HEAD
BreachRx vs iluminr: which crisis simulation platform fits your team?
THE SHORT ANSWER
By The Exercise Desk · Crisis Simulation Ranked · Published 2026-10-11
Desk research from public vendor pages, vendor announcements and standards documents read between 27 September and 13 October 2026. Editorial assessment; we did not run any exercise on these platforms.
How do BreachRx and iluminr score on each criterion?
| Criterion | Weight | BreachRx | iluminr | Higher score |
|---|---|---|---|---|
| Scenario realism | 20% | Rex AI's Exercise Agent builds organisation-specific scenarios around emerging threats, incident types, business units and dependencies, and live orchestration delivers scenario developments during the exercise; a scenario that branches on each decision is not described. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | Real-time injects and immersive media, with AI assessing each response against the organisation's own plans; a scenario that branches on each decision is not described. Source: iluminr homepage · Read 27 Sep 2026 | Tie |
| Executive and board focus | 20% | Enterprise-wide exercises bring security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners together, and reports include executive summaries; board dashboards are not described. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | Built for boards, executives, crisis teams and risk functions, with board-ready dashboards. Source: iluminr homepage · Read 27 Sep 2026 | iluminr |
| Exercise delivery effort | 15% | The Exercise Agent generates moderator guides, timelines, injects, decision points and participant materials, and the vendor names a monthly or biweekly cadence; a human moderator still runs the session. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | Microsimulations of 3–5 minutes for one person and 30–45 minutes for a team make frequent practice practical. Source: iluminr homepage · Read 27 Sep 2026 | iluminr |
| Measurement and after-action reporting | 15% | After-action reports, executive summaries, gap analyses and prioritised improvements; gaps and observations are captured automatically and fed back into response workflows for a retest. Benchmarking across teams is not described. Source: BreachRx: Rex agentic AI · Read 13 Oct 2026 | Behavioural evidence (decision velocity, confidence, alignment) and benchmarking by department, region and role. Source: iluminr blog: continuous capability intelligence (18 August 2026) · Read 27 Sep 2026 | iluminr |
| Regulatory evidence | 10% | Cyber RegScout brings regulatory context into the exercise, updating tasks, deadlines and disclosure milestones as the scenario changes; mapping of results to named frameworks is not described on the pages reviewed. Source: BreachRx: Rex agentic AI · Read 13 Oct 2026 | Nine named frameworks on the homepage, including DORA, APRA CPS 230, ISO 22301 and FFIEC, plus automated board-ready regulatory reports citing DORA, NIS2, CER and APRA CPS 230. Source: iluminr press release: continuous capability intelligence (PRWeb, 25 August 2026) · Read 11 Oct 2026 | iluminr |
| Customisation | 10% | Scenarios are generated for the organisation's business units and dependencies and test its own response playbooks inside the Rex Platform. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | The AI Context Engine draws on the organisation's continuity and GRC data; authoring tools are not described in detail. Source: iluminr blog: continuous capability intelligence (18 August 2026) · Read 27 Sep 2026 | BreachRx |
| Pricing clarity | 10% | No price published; the route in is a demo. A free, facilitated exercise is offered only to qualifying healthcare providers. Source: BreachRx homepage · Read 13 Oct 2026 | No price published on the pricing page. Source: iluminr pricing · Read 27 Sep 2026 | Tie |
| Total | 100% | iluminr |
Which stages of an exercise does each cover?
Build: Documented
The Rex AI Exercise Agent builds organisation-specific scenarios around emerging threats, incident types, business units and dependencies.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
Adapt: Partial
Live orchestration delivers scenario developments during the exercise; branching on each decision is not described.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
Seats: Documented
Enterprise-wide exercises for security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners, or focused micro-exercises for one team.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
Run: Partial
Moderator guides, timelines and discussion prompts are generated; the free healthcare exercise is run by BreachRx facilitators.
Source: BreachRx blog: free tabletop exercise for healthcare providers (6 October 2026) · Read 13 Oct 2026
Report: Documented
After-action reports, executive summaries, gap analyses and prioritised improvements; gaps and observations are captured automatically.
Source: BreachRx: Rex agentic AI · Read 13 Oct 2026
Map: Partial
Cyber RegScout adds regulatory deadlines and disclosure milestones to the exercise; framework mapping of results is not described.
Source: BreachRx: Rex agentic AI · Read 13 Oct 2026
Build: Documented
The AI Context Engine draws on business continuity and GRC data during scenarios (August 2026 update).
Source: iluminr blog: continuous capability intelligence (18 August 2026) · Read 27 Sep 2026
Adapt: Partial
Real-time injects and immersive media; AI assesses each response against the organisation's own plans. Branching on each decision is not described.
Source: iluminr homepage · Read 27 Sep 2026
Seats: Documented
Built for boards, executives, crisis teams and risk functions; single-player microsimulations and team exercises.
Source: iluminr homepage · Read 27 Sep 2026
Run: Partial
Live QR polling supports in-room sessions; who facilitates a tabletop is not described on the pages reviewed.
Source: iluminr blog: continuous capability intelligence (18 August 2026) · Read 27 Sep 2026
Report: Documented
Board-ready dashboards and regulatory reports, benchmarking by department, region and role, and behavioural evidence such as decision velocity, confidence, alignment and blind spots.
Source: iluminr press release: continuous capability intelligence (PRWeb, 25 August 2026) · Read 11 Oct 2026
Map: Documented
Evidence mapped to DORA, ISO 22301, APRA CPS 230, FCA/PRA, NIST CSF, UK Operational Resilience, ISO 27001, FFIEC and OSFI E-21, with automated regulatory reporting.
Source: iluminr homepage · Read 27 Sep 2026
BreachRx documents 3 of 6 stages and iluminr documents 4 of 6.
What do they cost?
BreachRx
Packaging: One module of the Rex Platform, alongside incident response management, Rex AI, out-of-band communications and Cyber RegScout; access through a demo.
Not published BreachRx publishes no prices and has no pricing page in its navigation; the route in is a demo. A free, facilitated exercise is offered to qualifying hospitals and healthcare providers (October 2026).
Source: BreachRx homepage · Read 13 Oct 2026
iluminr
Packaging: A resilience exercising platform with several modules; pricing through sales.
Not published iluminr's pricing page publishes no prices.
Source: iluminr pricing · Read 27 Sep 2026
Which frameworks do they map results to?
BreachRx
None named on the pages reviewed
iluminr
- DORA
- ISO 22301
- APRA CPS 230
- FCA/PRA
- NIST CSF
- UK Operational Resilience
- ISO 27001
- FFIEC
- OSFI E-21
- NIS2
- CER
Source: iluminr homepage · Read 27 Sep 2026
Source: iluminr press release: continuous capability intelligence (PRWeb, 25 August 2026) · Read 11 Oct 2026
Which should you choose?
Choose BreachRx if
- Executive and board focus: 8 / 10, Enterprise-wide exercises bring security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners together, and reports include executive summaries; board dashboards are not described.
- Measurement and after-action reporting: 8 / 10, After-action reports, executive summaries, gap analyses and prioritised improvements; gaps and observations are captured automatically and fed back into response workflows for a retest. Benchmarking across teams is not described.
- Exercises inside an incident response platform
Choose iluminr if
- Regulatory evidence: 10 / 10, Nine named frameworks on the homepage, including DORA, APRA CPS 230, ISO 22301 and FFIEC, plus automated board-ready regulatory reports citing DORA, NIS2, CER and APRA CPS 230.
- Executive and board focus: 9 / 10, Built for boards, executives, crisis teams and risk functions, with board-ready dashboards.
- Board-level evidence for regulated firms
BreachRx profileiluminr profileAlternatives to BreachRxAlternatives to iluminrSee them side by side
Frequently asked questions
Is BreachRx or iluminr better for executive crisis exercises?
iluminr scores higher on executive and board focus (9 against 8 out of 10). Read each profile for the detail.
Which is easier to run, BreachRx or iluminr?
iluminr scores higher on delivery effort, where a higher score means less effort, (8 against 7 out of 10). Read each profile for the detail.
Do BreachRx and iluminr publish prices?
Neither BreachRx nor iluminr publishes a price for its exercise product.