Crisis simulation platform rankings: nine tabletop and simulation platforms scored
THE QUESTION
Cyber crisis simulation and tabletop exercise platforms: which one prepares executives and response teams for a real incident?
The weights for this question, and why we chose them, are on the scoring page.
THE SHORT ANSWER
iluminr and Reflex Security tie for first at 7.55; Immersive Labs follows at 7.30. BreachRx and Conducttr tie at 6.75. No platform scores highest on every criterion: iluminr is highest or tied highest on executive and board focus, measurement and after-action reporting and regulatory evidence and trails on scenario realism, exercise delivery effort, customisation and pricing clarity. Reflex Security is highest or tied highest on scenario realism and exercise delivery effort and trails on executive and board focus, measurement and after-action reporting, regulatory evidence, customisation and pricing clarity.
Updated 2026-10-13
By The Exercise Desk · Crisis Simulation Ranked · Published 2026-10-11
Desk research from public vendor pages, vendor announcements and standards documents read between 27 September and 13 October 2026. Editorial assessment; we did not run any exercise on these platforms.
How do the nine platforms rank?
Crisis readiness score (editorial assessment, 0 to 10)
An operational resilience exercising platform for boards, executives and crisis teams, from 3–5 minute microsimulations to team tabletops, with evidence mapped to a long list of regulations.
Packaging: A resilience exercising platform with several modules; pricing through sales.
Strengths
The deepest regulatory evidence in this set: 11 named frameworks, automated regulatory reporting and board-ready dashboards.
Short formats (3–5 minute microsimulations) that make frequent practice realistic for busy executives.
Limits
No price published.
No technical hands-on work: it exercises decisions, not keyboard skills.
The pages reviewed describe real-time injects but not a scenario that branches on each decision.
Replacing the scripted tabletop with a live crisis
7.55 / 10
A crisis simulation that builds the scenario from the organisation's real environment, runs an adversary that adapts to every decision, and produces the after-action report when the session ends.
Packaging: A single-purpose crisis simulation product; access through a demo.
Strengths
The most realistic scenario source in this set: the organisation's own footprint and telemetry, with an adversary that is not scripted.
The lowest delivery effort here: scenario in minutes, a sixty-minute session, an AI facilitator and AI stand-ins for absent roles.
Limits
No price published (the pricing URL returns a 404); the vendor compares its cost with a single consultant-led exercise but shows no figure.
No board dashboards or cross-team benchmarking are described, and fewer frameworks are named than iluminr lists.
The pages reviewed do not describe editing injects by hand; Conducttr and TryHackMe give the organisation more direct control of the script.
Crisis simulation inside a wider readiness platform
7.30 / 10
Crisis Sim and digital tabletop exercises inside Immersive One, a platform that also runs labs, cyber drills and a live-fire range on the customer's own tools.
Packaging: Part of the Immersive One platform alongside labs, drills and ranges; pricing through sales.
Strengths
Strong measurement: decision-level scoring, a Resilience Score and benchmarks across teams.
The same platform can take technical players from the crisis room into a live-fire range on their own tools.
Limits
No price published.
A multi-product platform: the crisis simulation is one module among labs, drills and ranges, which takes more programme ownership to run.
Facilitation of a live session is not described on the pages reviewed.
AI Tabletops inside the Rex Platform, an incident response management platform, where the same workflows, playbooks and out-of-band communications used in a live incident are exercised and then updated from the findings.
Packaging: One module of the Rex Platform, alongside incident response management, Rex AI, out-of-band communications and Cyber RegScout; access through a demo.
Strengths
The exercise runs in the same platform used for live incident response, so findings feed straight into the workflows, owners and playbooks being tested.
Broad seats: security, legal, privacy, communications, risk, executives and outside partners in one enterprise-wide exercise, with executive summaries and gap analyses at the end.
Limits
No price published.
No technical hands-on work: no lab or investigation environment is described.
A scenario that branches on each decision and mapping of results to named frameworks are not described on the pages reviewed.
A crisis exercise platform for building and running your own exercises, with a simulated information environment of news, social media and messaging, and the only full public price list in this set.
Packaging: Annual team licences, published by tier.
Strengths
Full control of the scenario: you write or draft every inject in the Scenario Editor.
The only platform here that publishes a complete price list for its exercise product.
Limits
Delivery takes exercise design and facilitation work from the organisation.
No regulatory mapping of results is described, and behavioural assessment is a paid add-on.
General crisis software, not specific to cyber incidents.
A cyber incident response management hub with a simulation generator: five ready-made crisis simulations and an AI engine that builds new ones from the organisation's profile, run in a Simulation Mode inside the platform.
Packaging: Part of the Cytactic incident response management platform, alongside playbooks, decision support, communication and disclosure agents; access through a demo.
Strengths
A ready library of five simulations plus a generator that drafts a new scenario, injects and moderator guidance from the organisation's profile.
The exercise sits next to the playbooks, communication and disclosure tools the team would use in the real incident.
Limits
No price published.
No technical hands-on work: no lab or investigation environment is described.
Board-specific formats, decision-level measurement and named framework mapping are not described on the pages reviewed.
Crisis Sim 360 connects Cyberbit's cloud cyber range to executive, legal, communications and risk teams, with nonlinear exercises where SOC findings trigger boardroom decisions.
Packaging: Crisis Sim 360 is "only offered as an add-on" to a Cyberbit Readiness plan.
Strengths
Nonlinear exercises in which technical escalations from the SOC trigger executive decisions.
Executives and technical responders can work the same incident, with a cyber range behind it.
Limits
Sold only as an add-on to a Cyberbit Readiness plan.
No price published, and scenario authoring and facilitation are not described on the pages reviewed.
Crisis Control, a platform-led tabletop with scenario waves, injects, simulated email, news and social media, and optional hands-on investigation, from a large technical training platform.
Packaging: Part of Hack The Box for business; Crisis Control is arranged through a demo.
Strengths
Optional hands-on investigation lets technical players work the incident inside the tabletop.
A structured output: Golden Report, action roadmap and technical annexes.
Limits
Six baseline scenarios tailored on request: less self-serve scenario building than the leaders.
No regulatory mapping described, and Crisis Control itself is not priced publicly.
Highest in set (ties marked on every tied cell)Lowest in set
Reflex Security ranks =1 of 9. It is highest or tied highest on scenario realism and exercise delivery effort and lowest or tied lowest on pricing clarity; it trails at least one platform on executive and board focus, measurement and after-action reporting, regulatory evidence, customisation and pricing clarity.
Which stages of an exercise does each platform document?
One module of the Rex Platform, alongside incident response management, Rex AI, out-of-band communications and Cyber RegScout; access through a demo.
Not publishedBreachRx publishes no prices and has no pricing page in its navigation; the route in is a demo. A free, facilitated exercise is offered to qualifying hospitals and healthcare providers (October 2026).
Four annual team licences: Raven £11,950, Hawk £16,465, Osprey £21,000 and Eagle £25,725 a year, each for up to 40 participants per session, in GBP excluding tax. Assessment Toolkit from £4,536 a year. Larger exercises and Conducttr Local are priced on request.
Part of the Cytactic incident response management platform, alongside playbooks, decision support, communication and disclosure agents; access through a demo.
Not publishedCytactic publishes no prices and has no pricing page in its navigation; the route in is a demo.
Part of Hack The Box for business; Crisis Control is arranged through a demo.
Not publishedCrisis Control has no published price. The business Professional plan is published at $2,500 per seat per year ($250 per seat per month), but that is a training plan, not the tabletop product.
CISA publishes over 100 Tabletop Exercise Packages with objectives, scenarios, discussion questions and references, plus a slide deck, a feedback form and an After Action Report template. Cyber scenarios include ransomware, insider threats, phishing and industrial control system compromise. They are the free baseline every paid option should improve on.
Incident response firms sell facilitated tabletops as a service, for example the CrowdStrike Tabletop Exercise, which CrowdStrike describes as discussion-based, and Unit 42 incident simulation and testing services from Palo Alto Networks. They are services rather than platforms, so we do not score them.
Cloud Range runs live-fire attack simulations across IT, OT and cloud on a replica of the customer's network with licensed SOC tools, and also mentions simulation-supported tabletop exercises; SimSpace now positions its platform as AI Proving Grounds for validating AI agents and human teams. Both test technical response rather than executive crisis decisions, and neither publishes a price, so we describe them here and do not score them.
Cyber ranges and hands-on labs train keyboard skills rather than crisis decisions; where a vendor here also sells them we mention it, but they do not earn points. Security awareness training for the whole workforce is a different category.
Because the totals are equal on the published weights. Reflex Security scores higher on realism, delivery effort and customisation; iluminr scores higher on executive and board focus, after-action reporting and regulatory evidence. Which one fits depends on whether your gap is a realistic rehearsal or evidence for a supervisor. The planner shows how the order moves with your weights.
Why do platforms with no published prices rank so high?
Pricing clarity is 10% of the score, and the three highest-ranked platforms score 1 there. They rank high on realism, executive focus and reporting. If price visibility matters more to you, raise its weight in the exercise planner.
How often are the scores updated?
When a vendor publishes a change that affects a criterion. This edition uses pages read between 27 September and 13 October 2026.