simler
World's first AI-native tabletop exercise platform

AI-powered tabletop exercises for cybersecurity teams

Generate realistic incident simulations in minutes — tailored to your organization's context, policies, and team structure.

War room · Live session

Ransomware Encryption of User Data & CRM Systems

01:26 / 30:00Live
Your team, one realistic incident, AI plays the rest.

The challenge

The problem with tabletop exercises today

Most organizations know they should practice incident response. The reality of doing it holds them back.

Script creation takes weeks

Writing a complete simulation script with roles, timeline, and injects requires significant time and expertise — and the results often feel static and predictable.

Dependent on availability

Role assignments are limited to whoever is available, causing exercises to be postponed or run with incomplete staffing.

Consultants are expensive

Outsourcing to a consultant can cost up to €50,000, with results that often don't align with your specific business context.

€50,000 bought the 1% a single afternoon a year.

simler gives every organization what no budget could buy before: a continuous exercise discipline that compounds — in minutes, at a fraction of the cost.

How it works

From context to exercise in minutes

Step 01

Upload your context

Upload your ISP, BCP, and IRP — or generate them in the platform if you don't have them yet. We analyze your organization's unique context and team structure.

Step 02

Generate a simulation

AI creates a complete scenario with roles, timeline, and injects — tailored to your organization in minutes.

Step 03

Execute in the war room

Run the exercise in real-time with your team. AI agents fill missing roles automatically.

Platform

Everything you need for effective exercises

A complete platform that covers the entire tabletop exercise lifecycle, from preparation to measurable improvement.

AI-Generated Simulation Scripts

Generate complete tabletop exercise scripts, including roles, timeline, injects, and the incident's ground truth, in minutes instead of weeks. Every scenario is...

Learn more

Policy Documents as Ground Truth

Generate your Information Security Policy, Business Continuity Plan, Incident Response Plan, and Disaster Recovery Plan step-by-step, or upload the ones you hav...

Learn more

Grounded in Your Real Organization

Connect the sources your organization already keeps — system inventories, contact lists, on-call rosters — and every exercise knows your real environment. Scena...

Learn more

Adaptive Injects

Flip one switch and the exercise writes itself live. In adaptive mode, every inject is generated during the session — reacting to what your team says, decides, ...

Learn more

In-Character AI Teammates

Can't fill every role? AI agents play them like real colleagues: they respond to injects, coordinate with each other, share evidence such as log files, drafted ...

Learn more

Automatic Debriefing & Reporting

Every session is fully logged, enabling automatic generation of comprehensive debriefing reports. Get per-role compliance and competency scores, response times,...

Learn more

The improvement loop

One exercise finds the gaps.
The next one proves they're closed.

The loop starts in the outside world: a current threat from the landscape becomes the exercise, findings become verified fixes, and the next run proves them — end to end, threat to readiness.

01 / 04

Exercise

A current, documented threat flows in from the landscape and becomes the exercise — quarterly, so this run doubles as the retest of last quarter's fixes.

AI agentAttacker modeled on Interlock — retest focus loadedThreat landscape · CISA AA25-203A + Actions backlog
Readiness score72▲ +11 — fixes proved
Q1 · 52Q2 · 61Q3 · 72Q4 · 84
See how the loop works →
NIS2 Directive

Built for NIS2 compliance

The European NIS2 directive requires organizations to structurally invest in cybersecurity readiness. simler helps you meet these requirements with structured exercises and audit-ready documentation.

  • Meets Article 21 training and exercise requirements
  • Debriefing reports ready for audit documentation
  • Structured evidence of incident readiness
  • Traceable exercise history per organization

NIS2 Compliance Score

Exercise frequency92%
Procedure coverage87%
Documentation quality95%
Response readiness78%

Sample compliance dashboard

Cyberbeveiligingswet · The Netherlands

The Dutch Cyberbeveiligingswet takes effect on 15 August 2026

Over 8,000 Dutch organizations get a registration duty, a duty of care and a reporting duty — and boards become personally accountable. Check in two minutes whether your organization is in scope.

Already sure? Schedule the mandatory board training.

Pricing

Practice solo, scale to your team.

Unlimited simulations and tabletop exercises on every plan. Choose how many people play.

Solo

Run AI-powered tabletop exercises on your own. Five seats, solo play.

€99/mo

Save 2 months on annual billing

  • Unlimited AI-generated simulations
  • Unlimited tabletop exercises
  • Adaptive injects: the exercise reacts live to your team
  • Up to 5 accounts in your organization
Most popular

Team

Practice as a team. Up to ten teammates plus AI fill the unstaffed roles.

€299/mo

Save 2 months on annual billing

  • Unlimited AI-generated simulations
  • Unlimited tabletop exercises
  • Adaptive injects: the exercise reacts live to your team
  • Up to 10 accounts in your organization

Enterprise

Tailored to your organization. Custom seats, custom limits, dedicated support.

from €499
  • Everything in Team
  • Custom seat count and exercise limits
  • All compliance frameworks (NIS2, ISO 27001, DORA, BIO)
  • Email support + dedicated account manager

Ready to transform your incident readiness?

Run your first exercise this week — plans from €99 per month.