1
Choose your training
Select a mission directly or answer a few questions about your role and security context.
ROLE-BASED CYBERSECURITY TRAINING
BreachRoom turns realistic cybersecurity dilemmas into playable missions for the people making technology, risk and business decisions.
How it works
1
Select a mission directly or answer a few questions about your role and security context.
2
Explore the map, encounter realistic dilemmas and choose what you would do.
3
See the consequences, review your decisions and track the areas you should practise next.
Architecture Defence Lab and Secure Solution Builder sit on their own. One lets you build a system and test it. The other is 15 security decisions from idea to launch. The maps below are workplaces under pressure — phishing, ransomware, a risky AI launch, a poisoned build, a lockout.
Ten questions build a claims system. Then one attack walks the path you chose.
The Poisoned Claim · Destination: Nordic Shield
Learn how to build security into a digital solution from the first idea to production.
15 decisions from idea to launch
Investigate suspicious activity across email, Teams and fake login pages.
Destination: Security Hub
Work a ransomware morning across the Northstar campus and reach the Core Server Room.
Destination: Core Server Room
Coordinate Northstar’s response as ransomware spreads across the organisation.
Destination: Incident Coordination Room
Help the organisation launch an AI system with rails, not accidents.
Destination: Model Launch Gateway
Trace a weakness through packages, pipelines and cloud until the build can be trusted.
Destination: Trusted Build Exit
TRAINING BY ROLE
Choose the group that best matches your work. BreachRoom will assemble training from reviewed questions that fit the role, topic and context.
Practise how to pause on suspicious messages, protect credentials and report through the official channel.
You will practise
Practise how to verify sensitive requests before money, payroll or personal data moves.
You will practise
Practise how to protect code, pipelines, secrets and the path from commit to production.
You will practise
Practise how to contain active threats, verify identity requests and keep evidence for the response.
You will practise
Practise how to decide what to say, who to tell, and which trade-offs the organisation can live with.
You will practise
No account. Choose a mission. A written debrief at the end.
Play free