For companies with 50 to 300 people

Your cyber insurance renewal asks if you tested your incident response plan. In 15 days, the answer is yes, in writing.

3-hr facilitated tabletop exercise for your leadership team, plus an after-action report attesting that the exercise took place. 5 hours of your team's time, start to finish.

(We reply within one business day.)

Exercises are designed and facilitated by crisis simulation specialists who have run scenarios for government, financial services and healthcare organizations with highly complex operating environments.

Trusted by people at

02launch.comNespressoAlign TechUniversity of MarylandMEETHCOLOSSUSSparrowEckerd CollegeStetson University02launch.comNespressoAlign TechUniversity of MarylandMEETHCOLOSSUSSparrowEckerd CollegeStetson University

Renewal coming up? Find out in twenty minutes whether a tabletop is the right answer for you.

Book a 20-minute scoping call

What you are actually paying for

You can generate a tabletop scenario in thirty seconds. You can generate an after-action report template just as fast. Neither one is what your carrier is asking for.

A witness, not a document

Your carrier is not asking you to produce a report. They are asking you to demonstrate that something happened, and they want a credible third party to confirm it. Software cannot be a witness. This is why auditors still exist in a world that has accounting software.

Someone who makes the room answer

A chatbot can ask whether you would pay the ransom. It cannot make your CFO and your Managing Partner disagree out loud and then land on a decision. The discomfort is the product. The report is what is left over.

An outsider who can say what your IT lead cannot

Your IT manager already knows what is broken. He cannot tell the CEO the plan does not work without it sounding like a budget request. We can, and it lands differently.

The Carrier Acceptance Guarantee

If your insurer won't accept the report, we rewrite it until they do.

No extra fee No deadline No argument

You are buying proof. If it does not work as proof, it is not finished. That is our problem to fix, not yours.

Features

What you get.

Four things, each one aimed at the question your renewal form is asking.

A scenario built for your business

Not a template. We build the incident around your industry, your risk profile, and the response plan you actually have, so the exercise tests something real.

Your whole leadership team, one room

Executives, operations and IT working the same incident together. That coordination is the thing your carrier wants evidence of, and the thing that fails first in a real breach.

A report your carrier can read

Decisions made, gaps found, actions assigned, each with an owner and a date. Structured for submission rather than for a filing cabinet.

Proof the exercise happened

A signed attestation naming who attended, for how long, and on what date. This is the part no software can give you, and the part underwriters actually check.

Program Tiers

Two fixed-price programs. Know exactly what you get and what it costs before you commit.

Tier 1

Carrier-Ready Tabletop

We build and run a tailored tabletop exercise for your leadership team, then write the report your carrier is asking for.

  • Review of your playbooks, response plans and comms procedures
  • One custom-built scenario for your industry and risk profile
  • A 3-hour live, facilitated session
  • Written after-action report delivered within 15 days
  • Signed attestation with date, duration and participants
  • Covered by the Carrier Acceptance Guarantee
$15,000 Book now

One exercise. Everything you need for this year's renewal.

Frequently Asked Questions

Will our carrier actually accept this?

That is what the Carrier Acceptance Guarantee is for. If your carrier, broker, or auditor says the report does not meet their requirement, we revise it until it does, at no cost and with no deadline.

Does this replace live drills or a full incident response program?

No. A tabletop tests decision-making, not systems. Technical drills and a maintained response plan remain essential. This is the piece that demonstrates your leadership team has actually worked through a scenario together.

Can this work alongside the plans we already have?

Yes, and it should. We build the scenario around your existing incident response and business continuity plans, so the exercise tests what you actually rely on rather than a generic template.

Who needs to be in the room?

Your CEO or Managing Partner, your CFO or COO, whoever owns communications, and your IT lead. Between six and twelve people works best. Fewer than five and the disagreements that make the exercise valuable do not surface.

Is our data safe during the exercise?

Exercise material stays private to your organization and is never used to train public AI models. You control what scenario details are shared and with whom.

Book it before your renewal date, not after.

Fifteen days from the first call to a signed report in your hands. Covered by the Carrier Acceptance Guarantee, so if your insurer will not take it, we rewrite it until they do.

Checking availability

Twenty minutes. We ask about your renewal date, your current plan, and who would be in the room. If a tabletop is not the right thing for you right now, we say so.