Why Reflex Security and iluminr tie at the top of our crisis simulation ranking

What are the two platforms?

They come from different places. Reflex Security sells one thing, a crisis simulation that replaces the scripted tabletop. It builds the scenario from open-source intelligence about the organisation, can add the organisation's telemetry, and runs an adversary that adapts to each decision while simulated stakeholders push back. An AI facilitator, which its blog calls Victoria, joins a Zoom, Meet or Teams call, AI agents can sit in for absent roles, and technical players can query simulated logs and telemetry in an Investigation Console. The after-action report is produced when the session ends, with each finding traced to the moment it came from and mapped to MITRE ATT&CK techniques and NIST CSF functions.

iluminr comes from operational resilience. It sells microsimulations of 3–5 minutes for one person and 30–45 minutes for a team, facilitated tabletops, incident response management and what it calls Capability Intelligence. Its August 2026 update added an AI Context Engine that draws on operational plans, GRC data and emergency documentation, behavioural evidence such as decision velocity, confidence, alignment and blind spots, and automated board-ready regulatory reports citing DORA, NIS2, CER and APRA CPS 230. Its homepage names nine frameworks, from DORA to OSFI E-21.

Where does each one score higher?

On the seven criteria, Reflex scores higher on three: scenario realism (9 against 7), delivery effort (9 against 8) and customisation (8 against 7). iluminr scores higher on three: executive and board focus (9 against 8), measurement and after-action reporting (9 against 8) and regulatory evidence (10 against 7). They tie on pricing clarity, where neither publishes a price and both score 1.

The realism and executive focus criteria carry 20% each, delivery effort and after-action reporting 15% each, and the other three 10% each. Reflex's lead on the two heavier criteria it wins, realism and effort, is matched almost exactly by iluminr's leads on executive focus, after-action reporting and regulation. The result is the same total to two decimals.

Is the tie an artefact of the weights?

Partly, and we would rather say so than hide it. Any weighting puts one of them ahead. If every criterion counted the same, iluminr would lead and Reflex would be second. If realism counted for more, Reflex would lead. We chose our weights before we saw the totals, from the question the site answers: which platform prepares executives and response teams for a real incident. That question puts realism and the people in the room first, and evidence and price after. The scoring page gives the reasoning in full.

The presets in the planner show how far the order can move. A regulator-first weighting puts iluminr clearly ahead, with Immersive Labs second and Reflex third. A realism-first weighting puts Reflex ahead. A budget-first weighting puts Conducttr first, because it is the only platform with a full price list. Immersive Labs, close behind the leaders on our weights, stays in the top three on every preset except budget-first. The ranking is a starting point for a decision, not the decision.

Who should choose Reflex Security?

A team whose problem is that the annual tabletop has become a slide deck. If the executive group has never faced an incident that looks like its own systems, and the exercise is postponed every time someone cannot attend, Reflex's model addresses both: a scenario built from the organisation's footprint and a session that runs in an hour with AI stand-ins for missing people. The limits are a price you cannot see before a call, fewer named frameworks, and no described way to hand-write injects.

Who should choose iluminr?

A regulated firm whose problem is evidence. If a supervisor or board asks how often the crisis team exercises, how decisions are measured and which regulations the exercises map to, iluminr's dashboards, benchmarks and eleven framework mappings answer that directly. The limits are a scenario that, on the pages we read, uses real-time injects rather than branching on each decision, no technical hands-on work, and no published price.

What would change the order?

• A published price from either vendor would raise its pricing clarity score and break the tie.
• If iluminr documented scenarios that branch on each decision, its realism score would rise.
• If Reflex documented board dashboards or benchmarking, its executive focus and after-action scores would rise.
• A new platform scoring higher on realism and executive focus together would move both down.

Use the exercise planner with your own weights; for most buyers the tie will resolve within a minute of honest slider work.