MetisGrid vs ThreatGEN AutoTableTop

Fast automated exercises, or a reviewable record of every answer.

ThreatGEN AutoTableTop generates an exercise from your sector, stack, team, IR plan and network diagram and adapts injects to the team's choices; the Standard Edition is a single facilitator login. MetisForge gives every participant their own workspace and keeps the chain from answer to score, finding, action and re-test.

Side by side

MetisForge and ThreatGEN AutoTableTop, topic by topic.

MetisForge is the cyber exercise application in the MetisGrid platform. ThreatGEN AutoTableTop statements reviewed September 2026.

TopicMetisForgeThreatGEN AutoTableTop
How an exercise runsWhere the exercise happensIn the browser: the facilitator runs a console and each analyst answers in their own workspace, with timers and team chat. Use it alongside your own call or room.Projected, screen-shared or run asynchronously; the Standard Edition is licensed through a single facilitator login rather than participant workspaces.
AnswersHow participants respondEach analyst writes their own answer to each question. Every answer is attributed, timestamped, and timed from the moment the question was revealed.The team responds together through the facilitator's session; individual participant answers are not described.
ScenarioHow the scenario is builtAI drafts the scenario from your industry, threat, difficulty and objectives, grounded in your own documents and current threat intelligence. You review and edit every inject, question and rubric before it runs.AI-generated from sector, stack, team, IR plan and network diagram.
AdaptationHow the story changes during playDecision points branch the exercise on the team's choice. During the exercise the facilitator can add an inject or a decision point drafted from the answers so far, and review it before analysts see it.Adaptive AI injects react to the team's choices, which reduces facilitator effort but gives automation more control over direction and repeatability.
ReportWhat you receive and what followsA complete after-action report: document control, method, question-level scores, findings that cite the inject and answer behind them, corrective actions with owners and due dates, training, SME validation and re-test status.An auto-generated report that surfaces gaps against the IR plan. An owner, due date and re-test register is not described.
FrameworksFramework mappingMITRE ATT&CK techniques on every inject and coverage by tactic in the report. Exercise content lines up with NIST CSF 2.0, ISO 27001, ISO 22301, CIS 17.7, PCI DSS 12.10.2 and DORA testing requirements; no certification is claimed.MITRE ATT&CK mapping is not described on the product page.
BuyingPublished plans or pricesPlans are published (Team, Professional, Enterprise, per facilitator seat); prices are quoted while list prices are set during the pilot programme.Standard Edition listed at $3,000 with one facilitator login and unlimited exercises; multiple users, organisations or on-premises deployment are quoted as Enterprise.

Credit where it is due

Where ThreatGEN AutoTableTop is strong.

  • Published price and unlimited exercises on the Standard Edition.
  • Very quick setup from a short brief, with injects that adapt on their own.
  • On-premises and air-gapped deployment available on Enterprise.

Which fits

When to choose which.

Choose ThreatGEN AutoTableTop if

  • One person runs exercises for a team that answers together, and a quick automated report is enough.
  • You need an on-premises or air-gapped deployment.

Choose MetisForge if

  • You need each participant's own answer, scored and attributable.
  • Your facilitator should decide how the exercise changes, not the automation.
  • Findings must become owned corrective actions with training and re-test.
Inspect a full report

Sources

Read September 2026. Products change; if something here is out of date, write to info@metisgrid.com with a public source.