MetisGambit · Part of MetisForge

Solo cyber defense cases, played in 10 to 15 minutes

A hidden attacker is somewhere in a small company network. Search the logs, make your moves and keep the business running, then see every turn graded on what your logs could tell you at the time. Included with every MetisForge plan.

MetisForge · MetisGambit

Available

Find the attacker before they reach what matters.

MetisGambit is a solo game of cyber defense. You see only what your logs record, you have two moves a turn, and the business has to keep running while you work. Included with every MetisForge plan.

  • A case in 10 to 15 minutes

    A hidden attacker is somewhere in a small company network. Search the logs, make two moves a turn and keep a case file, without shutting the business down.

  • Only what your logs can show

    Alerts say what a log recorded, not what it means. Every turn is graded on what your logs could have told you at that moment.

  • The attack, replayed on the map

    When the case ends, the network map replays what the attacker really did, step by step, so you can see what your logs were showing you all along.

  • Longer matches against an AI adversary

    Adversary matches run about 20 turns. The debrief shows an ATT&CK scorecard, every call you made and what to change on Monday.

Practice between exercises. A guided first case, a daily case everyone plays and practice cases, played alone in the browser.

Ways to play

A quick case or a long match.

Played alone, in a desktop browser.

  1. 01Guided case

    Learn the game in one case. A guide walks you through the opening turns, then you are on your own.

  2. 02Daily case

    The same case for everyone that day, so you can compare your result with your team.

  3. 03Practice cases

    A new case each time, with one of three hidden attackers. The same alert can be real in one case and normal in the next.

  4. 04Adversary matches

    Longer games against an AI adversary, about 20 turns, with a full debrief.

Questions

Questions about MetisGambit.

What is MetisGambit?

A solo game of cyber defense. You defend a small company network against a hidden attacker, seeing only what your logs record, and every turn is graded on what you could have known at the time.

How long does a case take?

10 to 15 minutes. There is a guided first case, a daily case and practice cases. Adversary matches are longer, about 20 turns.

Who plays the attacker?

In a case, a hidden attacker following one of three attacks: a phishing email, a VPN password spray or a poisoned npm package. In an adversary match, an AI chooses the attacker's moves from the ones the rules allow, and the rules decide what each move does.

Is it a team game?

No. MetisGambit is played alone. Exercising the team together is what MetisForge is for.

What do I need to play?

A desktop browser at least 1,000 pixels wide. It is not built for phones.

Which plans include MetisGambit?

Every MetisForge plan. MetisGambit is part of MetisForge.

Bring MetisForge to your team

Start with a pilot.

A pilot can start with your industry, threat, exercise objectives, and team structure so you can assess the workflow against a scenario that matters to your organization.