Choose ThreatGEN AutoTableTop if
- One person runs exercises for a team that answers together, and a quick automated report is enough.
- You need an on-premises or air-gapped deployment.
MetisGrid vs ThreatGEN AutoTableTop
ThreatGEN AutoTableTop generates an exercise from your sector, stack, team, IR plan and network diagram and adapts injects to the team's choices; the Standard Edition is a single facilitator login. MetisForge gives every participant their own workspace and keeps the chain from answer to score, finding, action and re-test.
Side by side
MetisForge is the cyber exercise application in the MetisGrid platform. ThreatGEN AutoTableTop statements reviewed September 2026.
| Topic | MetisForge | ThreatGEN AutoTableTop |
|---|---|---|
| How an exercise runsWhere the exercise happens | In the browser: the facilitator runs a console and each analyst answers in their own workspace, with timers and team chat. Use it alongside your own call or room. | Projected, screen-shared or run asynchronously; the Standard Edition is licensed through a single facilitator login rather than participant workspaces. |
| AnswersHow participants respond | Each analyst writes their own answer to each question. Every answer is attributed, timestamped, and timed from the moment the question was revealed. | The team responds together through the facilitator's session; individual participant answers are not described. |
| ScenarioHow the scenario is built | AI drafts the scenario from your industry, threat, difficulty and objectives, grounded in your own documents and current threat intelligence. You review and edit every inject, question and rubric before it runs. | AI-generated from sector, stack, team, IR plan and network diagram. |
| AdaptationHow the story changes during play | Decision points branch the exercise on the team's choice. During the exercise the facilitator can add an inject or a decision point drafted from the answers so far, and review it before analysts see it. | Adaptive AI injects react to the team's choices, which reduces facilitator effort but gives automation more control over direction and repeatability. |
| ReportWhat you receive and what follows | A complete after-action report: document control, method, question-level scores, findings that cite the inject and answer behind them, corrective actions with owners and due dates, training, SME validation and re-test status. | An auto-generated report that surfaces gaps against the IR plan. An owner, due date and re-test register is not described. |
| FrameworksFramework mapping | MITRE ATT&CK techniques on every inject and coverage by tactic in the report. Exercise content lines up with NIST CSF 2.0, ISO 27001, ISO 22301, CIS 17.7, PCI DSS 12.10.2 and DORA testing requirements; no certification is claimed. | MITRE ATT&CK mapping is not described on the product page. |
| BuyingPublished plans or prices | Plans are published (Team, Professional, Enterprise, per facilitator seat); prices are quoted while list prices are set during the pilot programme. | Standard Edition listed at $3,000 with one facilitator login and unlimited exercises; multiple users, organisations or on-premises deployment are quoted as Enterprise. |
Credit where it is due
Which fits
Read September 2026. Products change; if something here is out of date, write to info@metisgrid.com with a public source.