MetisGrid vs iluminr

Short solo drills across the organisation, or a full team exercise on the incident itself.

iluminr comes from operational resilience. Its microsimulations are short, mostly single-player scenarios with immersive media, scored into resilience dashboards and board reporting across cyber and non-cyber disruption. MetisForge is a cyber exercise platform: a facilitator runs one scenario with the whole response team, and the report documents each decision and what it leads to.

Side by side

MetisForge and iluminr, topic by topic.

MetisForge is the cyber exercise application in the MetisGrid platform. iluminr statements reviewed October 2026.

TopicMetisForgeiluminr
How an exercise runsWhere the exercise happensIn the browser: the facilitator runs a console and each analyst answers in their own workspace, with timers and team chat. Use it alongside your own call or room.Individual microsimulations of 3–5 minutes, team exercises of 30–45 minutes, and facilitated tabletops, in iluminr's own app; incident response management with event rooms and playbooks alongside.
AnswersHow participants respondEach analyst writes their own answer to each question. Every answer is attributed, timestamped, and timed from the moment the question was revealed.In the public sample microsimulation, each decision is picked from a list of options, with confidence pulse checks; team participants can respond to prompts in writing.
FacilitatorWho runs and judges the exerciseA human facilitator paces the exercise, reveals questions, and scores each answer against the scenario's rubric. AI drafts; it does not make the final assessment.Microsimulations run on their own with AI feedback on each decision (marked beta in the sample); facilitated tabletops use a human facilitator with iluminr's tools.
ScenarioHow the scenario is builtAI drafts the scenario from your industry, threat, difficulty and objectives, grounded in your own documents and current threat intelligence. You review and edit every inject, question and rubric before it runs.A library of ready-made microsimulations across cyber, operational resilience, physical security, third-party and AI governance, plus scenario authoring.
MediaHow injects are presentedInjects are written briefings with evidence and questions in the analyst workspace; decision points branch the story.Short video clips, a simulated phone call and a mock video meeting with audio carry the story in the public sample.
EvidenceWhat is keptAnswers, scores, facilitator notes, decisions, the event timeline and team chat, kept as one exercise record.Scores for comprehension, decision speed and coordination by person, team or department, with benchmarks by department, region and role.
ReportWhat you receive and what followsA complete after-action report: document control, method, question-level scores, findings that cite the inject and answer behind them, corrective actions with owners and due dates, training, SME validation and re-test status.Resilience scores, coverage views and board-level summaries that can be exported to board decks and regulator submissions.
FrameworksFramework mappingMITRE ATT&CK techniques on every inject and coverage by tactic in the report. Exercise content lines up with NIST CSF 2.0, ISO 27001, ISO 22301, CIS 17.7, PCI DSS 12.10.2 and DORA testing requirements; no certification is claimed.Named on its site: DORA, ISO 22301, APRA CPS 230, FCA/PRA operational resilience, NIST CSF, UK operational resilience, ISO 27001 and FFIEC.
BuyingPublished plans or pricesPlans are published (Team, Professional, Enterprise, per facilitator seat); prices are quoted while list prices are set during the pilot programme.No plans or prices published; book a demo.
TryingTry before buyingAn interactive demo and a full sample report, with no sign-up.Four sample microsimulations after entering a name, business email and job title; the full versions need a demo.

Credit where it is due

Where iluminr is strong.

  • Breadth: one platform covers cyber, operational resilience, physical security, third-party and AI-governance scenarios.
  • Reach: short single-player drills let many people practise without scheduling a team session.
  • Board and regulator reporting, with benchmarks across departments, regions and roles and hosting in APAC, US or EU data centres.
  • Media-rich scenes: short video clips and simulated calls make an inject feel immediate.

Which fits

When to choose which.

Choose iluminr if

  • Your programme spans all kinds of disruption, not only cyber, and is owned by risk or resilience.
  • You want many people doing short individual drills more than one team doing a full exercise.

Choose MetisForge if

  • The people you need to exercise are the security response team and the managers they escalate to, together, on one incident.
  • You want answers in the team's own words rather than choices from a list, scored against a rubric.
  • You need a document that traces every finding to an answer and carries it through to re-test.
Inspect a full report

Sources

Read October 2026. Products change; if something here is out of date, write to info@metisgrid.com with a public source.