Customize, generate, play, analyse, remediate.
Crisis exercises have existed for a long time as tabletop exercises: you gather the decision-makers around a table, hand them a crisis scenario, and watch how they react. The method has proved itself — but it stays long to prepare, expensive to run and hard to repeat often. The result is that few organizations train as regularly as they should.
UnderCrisis automates and modernises the whole of that process. You describe your organization, its sector and its systems — and, if you want to, your own procedures: incident response plan, escalation chain, on-call rota, decision process. The platform writes a realistic scenario made for you, then plays it with your teams through a simulated mailbox, chat, service desk and phone calls — as though the crisis were really happening.
None of it is compulsory. Everything you add brings the exercise closer to your reality, and whatever you leave out is filled in with assumptions that are plausible for your sector. So you can start in minutes with the essentials and enrich it from one exercise to the next.
The platform adapts to your trade, whether a hospital, a bank, a factory or a local authority, and carries the obligations that apply to you: NIS2 and GDPR notification deadlines, DORA major incidents, health-data hosting — with the real authorities of your country, never an invented regulator.
The crises it plays are the ones that actually happen: ransomware encrypting production and threatening to publish data, a payment diverted from a compromised mailbox, a supplier the attacker comes in through, a cloud tenant opened with stolen tokens, or a production line at a standstill with people’s safety at stake. And all of it at a fraction of the cost of a classic exercise: where a traditional tabletop takes a serious budget, UnderCrisis gives a more immersive experience, continuously, with deeper analysis of what was done and a fuller debrief — without cost standing in the way.
Describe your organization: systems, roles, partners, customers, and your own procedures if you have them. The scenario draws weaknesses and attack paths from them, consistent with your risks, your data and the rules you answer to. All of it is optional: what you detail brings the exercise closer to your reality, the rest is filled with plausible assumptions. What comes out resembles no other exercise: it is yours.
Your scenario comes to life. Turns of events, phone calls, decisions under pressure, teams having to work together: our AI orchestrates all of it in real time, so the exercise rings true at every moment.
The crisis starts, and nothing pauses to let you think. Detect, respond, recover: the NIST CSF functions follow one another under pressure, while you have to govern the trade-offs and answer to users, customers and authorities.
Every exercise ends with a full report, a clear action plan and measures that follow your progress over time. Replay it, make it harder, get better: building the capability never stops.
| Criterion | Other simulators | UnderCrisis |
|---|---|---|
| Personalisation | Generic scenario, adapted by hand | Your systems, your roles, your procedures and your obligations |
| Evaluation | The facilitator’s judgement | Scored by capability and by phase, with the reason |
| Report and remediation | A write-up produced afterwards | Report, findings and action plan generated at the close |
| Immersion | Not possible— | Simulated mail, chat, service desk, calls and documents |
| Real-time pressure | Not possible— | Timed injects, phone calls, deadlines that fall due |
| Decision trail | Not possible— | Who decided what, when, and why it was right or wrong |
| Progress | Not possible— | Followed from one exercise to the next |
| Certificate of completion | Not possible— | Issued for every finished session |