PLATFORM PROFILE · RANK =4 OF 9
BreachRx crisis simulation review: tabletops inside an incident response platform
THE SHORT ANSWER
BreachRx ranks =4 of 9 at 6.75. Its AI Tabletops run inside the Rex Platform, the system its customers use for live incident response, and score 8 / 10 on executive and board focus and 8 / 10 on after-action reporting. It trails Reflex Security on scenario realism and delivery effort, iluminr on regulatory evidence, and publishes no price.
By The Exercise Desk · Crisis Simulation Ranked · Published 2026-10-11
Desk research from public vendor pages, vendor announcements and standards documents read between 27 September and 13 October 2026. Editorial assessment; we did not run any exercise on these platforms.
Total, rank =4 of 9 (Tied)
Exercises inside an incident response platform
Highest or tied highest on no criterion; lowest or tied lowest on pricing clarity.
How does BreachRx score on each criterion?
| Criterion | Weight | Score | Why |
|---|---|---|---|
| Scenario realism | 20% | Rex AI's Exercise Agent builds organisation-specific scenarios around emerging threats, incident types, business units and dependencies, and live orchestration delivers scenario developments during the exercise; a scenario that branches on each decision is not described. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | |
| Executive and board focus | 20% | Enterprise-wide exercises bring security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners together, and reports include executive summaries; board dashboards are not described. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | |
| Exercise delivery effort | 15% | The Exercise Agent generates moderator guides, timelines, injects, decision points and participant materials, and the vendor names a monthly or biweekly cadence; a human moderator still runs the session. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | |
| Measurement and after-action reporting | 15% | After-action reports, executive summaries, gap analyses and prioritised improvements; gaps and observations are captured automatically and fed back into response workflows for a retest. Benchmarking across teams is not described. Source: BreachRx: Rex agentic AI · Read 13 Oct 2026 | |
| Regulatory evidence | 10% | Cyber RegScout brings regulatory context into the exercise, updating tasks, deadlines and disclosure milestones as the scenario changes; mapping of results to named frameworks is not described on the pages reviewed. Source: BreachRx: Rex agentic AI · Read 13 Oct 2026 | |
| Customisation | 10% | Scenarios are generated for the organisation's business units and dependencies and test its own response playbooks inside the Rex Platform. Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026 | |
| Pricing clarity | 10% | Tied lowest | No price published; the route in is a demo. A free, facilitated exercise is offered only to qualifying healthcare providers. Source: BreachRx homepage · Read 13 Oct 2026 |
Which stages of an exercise does BreachRx cover?
Build: Documented
The Rex AI Exercise Agent builds organisation-specific scenarios around emerging threats, incident types, business units and dependencies.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
Adapt: Partial
Live orchestration delivers scenario developments during the exercise; branching on each decision is not described.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
Seats: Documented
Enterprise-wide exercises for security, legal, privacy, IT, communications, risk, business leaders, executives and outside partners, or focused micro-exercises for one team.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
Run: Partial
Moderator guides, timelines and discussion prompts are generated; the free healthcare exercise is run by BreachRx facilitators.
Source: BreachRx blog: free tabletop exercise for healthcare providers (6 October 2026) · Read 13 Oct 2026
Report: Documented
After-action reports, executive summaries, gap analyses and prioritised improvements; gaps and observations are captured automatically.
Source: BreachRx: Rex agentic AI · Read 13 Oct 2026
Map: Partial
Cyber RegScout adds regulatory deadlines and disclosure milestones to the exercise; framework mapping of results is not described.
Source: BreachRx: Rex agentic AI · Read 13 Oct 2026
What does BreachRx sell for crisis exercising?
Exercise product: AI Tabletops (Rex Platform)
Packaging: One module of the Rex Platform, alongside incident response management, Rex AI, out-of-band communications and Cyber RegScout; access through a demo.
- What it is
- BreachRx calls itself an "AI-accelerated Cyber Incident Response Management (CIRM) Platform"; tabletops are one module of the Rex Platform.
Source: BreachRx homepage · Read 13 Oct 2026
- AI Tabletops
- "Design, run, and document realistic cyber incident simulations" in the same platform used in a live response, from scenario design to after-action report, "for executives or a single team".
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
- Generated materials
- Moderator guides, exercise timelines, discussion prompts, scenario injects, decision points and participant materials.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
- Cadence
- "Annual, monthly, biweekly, or whenever conditions change." The page says the AI does not make incident decisions; people keep judgment and approvals.
Source: BreachRx: AI Tabletops (Rex Platform) · Read 13 Oct 2026
- Rex AI
- An agentic layer coordinated by Maestro, with named agents including Incident Commander, RegScout, Reporting and an Exercise Agent; findings update workflows and ownership before a retest.
Source: BreachRx: Rex agentic AI · Read 13 Oct 2026
- Integrations
- 21 listed, including Jira, ServiceNow, Slack, Teams, Zoom, Okta, Entra ID, PagerDuty, CrowdStrike, Cortex XSOAR and Google SecOps.
Source: BreachRx: integrations · Read 13 Oct 2026
- Company
- $15M Series A closed 19 May 2025, led by Ballistic Ventures, with total raised "over $23 million"; "more than 100 customers" as of May 2025; headquartered in San Francisco.
Source: BreachRx press release: $15M Series A (19 May 2025) · Read 13 Oct 2026
- Price
- No price published; demo-led. A free, facilitated tabletop for qualifying healthcare providers was announced on 6 October 2026.
Source: BreachRx blog: free tabletop exercise for healthcare providers (6 October 2026) · Read 13 Oct 2026
What does BreachRx cost?
Not published BreachRx publishes no prices and has no pricing page in its navigation; the route in is a demo. A free, facilitated exercise is offered to qualifying hospitals and healthcare providers (October 2026).
Source: BreachRx homepage · Read 13 Oct 2026
Which frameworks does BreachRx map results to?
None named on the pages reviewed
Where is BreachRx strong, and where does it fall short?
Strengths
- The exercise runs in the same platform used for live incident response, so findings feed straight into the workflows, owners and playbooks being tested.
- Broad seats: security, legal, privacy, communications, risk, executives and outside partners in one enterprise-wide exercise, with executive summaries and gap analyses at the end.
Limits
- No price published.
- No technical hands-on work: no lab or investigation environment is described.
- A scenario that branches on each decision and mapping of results to named frameworks are not described on the pages reviewed.
Where at least one platform scores higher
- Scenario realism: BreachRx 7 / 10; highest Reflex Security 9 / 10
- Executive and board focus: BreachRx 8 / 10; highest iluminr 9 / 10
- Exercise delivery effort: BreachRx 7 / 10; highest Reflex Security 9 / 10
- Measurement and after-action reporting: BreachRx 8 / 10; highest iluminr and Immersive Labs 9 / 10
- Regulatory evidence: BreachRx 6 / 10; highest iluminr 10 / 10
- Customisation: BreachRx 8 / 10; highest Conducttr 10 / 10
- Pricing clarity: BreachRx 1 / 10; highest Conducttr 10 / 10
Who should shortlist BreachRx?
Organisations that want the exercise and the real response to live in one system: playbooks, owners and out-of-band communications are tested in the exercise and updated from its gap analysis before a retest. Cyber RegScout adds regulatory deadlines and disclosure milestones to the scenario.
Less suited to a team that wants an adversary reacting to each decision (Reflex Security), hands-on technical investigation in the same exercise (Reflex Security, Immersive Labs, Hack The Box), or evidence mapped to a long list of named frameworks (iluminr).
How does BreachRx compare head to head?
- BreachRx weighed against Conducttr
BreachRx 6.75 / Conducttr 6.75
- BreachRx weighed against Cyberbit
BreachRx 6.75 / Cyberbit 5.90
- BreachRx weighed against Cytactic
BreachRx 6.75 / Cytactic 6.40
- BreachRx weighed against Hack The Box
BreachRx 6.75 / Hack The Box 5.60
- BreachRx weighed against iluminr
BreachRx 6.75 / iluminr 7.55
- BreachRx weighed against Immersive Labs
BreachRx 6.75 / Immersive Labs 7.30
- BreachRx weighed against Reflex Security
BreachRx 6.75 / Reflex Security 7.55
- BreachRx weighed against TryHackMe
BreachRx 6.75 / TryHackMe 5.95
Desk notes that mention BreachRx
Frequently asked questions
Is BreachRx a tabletop exercise platform?
Tabletops are one module. BreachRx describes itself as a cyber incident response management platform; AI Tabletops runs exercises inside the same Rex Platform used in a live incident.
What does the BreachRx Exercise Agent produce?
Organisation-specific scenarios, moderator guides, timelines, discussion prompts, injects, decision points and participant materials, according to the AI Tabletops page.
Does BreachRx publish pricing?
No. The route in is a demo. In October 2026 BreachRx announced a free, facilitated tabletop for qualifying hospitals and healthcare providers.
Read next
- Crisis simulation rankings
All nine platforms on every criterion.
- Side by side
BreachRx next to the platforms closest in the ranking.
- Exercise planner
Re-weight the ranking for your own programme.
- How we score
Criteria, weights, and evidence rules.