Facilitators
Run it together from one console.
The lead reveals injects and keeps the exercise moving in real time. Co-facilitators score answers against the rubric, take notes, and flag gaps alongside.
MetisForge
Cyber tabletop exercises that leave evidence behind
MetisForge plans, runs and assesses cyber tabletop exercises in the browser. A facilitator drafts a scenario for your organization and threat, the team answers each inject from their own seat, and every score, note and finding lands in one after-action report that links back to the answers behind it.
How it works
Plan the exercise. Run it. Prove what happened.
MetisForge keeps the scenario, live decisions, assessment, and follow-up in one record.
01Describe your scenario
Choose your industry, threat, and difficulty. Review the AI draft and refine it to match your environment.
Your outputScenario, injects, scripts, questions, and scoring rubric02Run it live
Set the pace from the facilitator console. Analysts work through revealed questions on their own screens, with timers and chat keeping the team coordinated.
Your outputTimestamped responses, scores, decisions, and facilitator notes03Review the evidence
Review question-level scores and source evidence, confirm the findings, then assign the work that follows.
Your outputScored decisions, cited findings, and corrective actions
Turn findings into action
Close the gaps the exercise exposes.
Each evidence-backed finding can become an owned corrective action, focused training, SME validation, and a targeted re-test.
01
CaptureResponses, decisions, scores, and facilitator observations02
ExplainFindings linked back to the exercise evidence that supports them03
AssignCorrective actions and focused training for the gaps observed04
ValidateEvidence reviewed by a subject-matter expert or facilitator05
Re-testA new exercise confirms whether readiness actually improved
A completed task shows that someone finished the assigned work. Validation and re-test show whether the response actually improved.
Clear roles, shared context
Every seat at the table gets its own view.
Give each participant the information and controls their role needs.
Analysts
Answer on your own screen.
Work through revealed questions with timers and team chat. Participant, facilitator, and leadership views remain deliberately separated.
Leadership
Read results you can explain.
Rubric-based results expose gaps without hiding the underlying rationale. Review the source responses alongside the assessment.
Frameworks
Exercise records that line up with the frameworks you report against.
Many frameworks expect incident response plans to be tested and the results acted on. MetisForge keeps the record those tests produce. It is alignment, not certification.
- NIST CSF 2.0
- NIST SP 800-61r3
- NIST SP 800-84
- ISO/IEC 27001
- ISO 22301
- CIS Controls 17.7
- PCI DSS 12.10.2
- DORA
- NYDFS 500.16
- HIPAA
- SEC Item 106
Questions
Questions about MetisForge.
What is a cyber tabletop exercise?
A discussion-based rehearsal of a cyber incident. A facilitator presents the incident as a series of injects, the team says what it would do at each point, and the answers are assessed against what a sound response looks like. MetisForge runs the whole exercise in the browser: scenario, live session, scoring and report.
How long does it take to build a scenario?
A facilitator describes the organization, the threat and the objectives, and MetisForge drafts a scenario with injects, participant questions, scoring guidance and MITRE ATT&CK context. The facilitator reviews and edits every part before it is used.
Does AI make the final assessment?
No. The facilitator scores each question. AI can help analyze the exercise record, but the report keeps the underlying answers, scores and observations visible, and a facilitator reviews the findings before releasing the report.
Do participants need to install anything?
No. MetisForge is 100% virtual and web-based. Participants answer from their own browser, and each role sees only what that role needs.
What happens after the exercise?
The after-action report links every finding to the answers behind it. Each gap can become an owned corrective action, focused training and a targeted re-test, so follow-through stays connected to the exercise that exposed it.
Is MetisForge a compliance certification?
No. MetisForge records and reports line up with the exercise and testing expectations in frameworks such as NIST CSF 2.0, ISO 27001 and DORA. That is alignment, not certification: your auditors decide what evidence satisfies a requirement.
Bring MetisForge to your team
Start with a pilot.
A pilot can start with your industry, threat, exercise objectives, and team structure so you can assess the workflow against a scenario that matters to your organization.