Skip to missions
Hourglass CommandDECISION TRAINING

PHYSICAL · INTELLIGENCE · CYBER

The first hour.
Every decision counts.

Read converging signals. Make a defensible call. Practice the judgment that turns incomplete information into a clear operating posture.

60-minute scenarios6 campaign chaptersBy Shannon Brown
YOUR NEXT CHAPTER01 / 06

Foundations: Vendor Crisis

Learn structured decision-making when a critical vendor fails

Enter the simulation
CONTINUE

Proceed with enhanced monitoring.

DEGRADE

Reduce exposure with compensating controls.

PAUSE

Halt affected operations.

01 / THE CAMPAIGN

Build your decision craft.

Complete each chapter to unlock the next.

Campaign progress0 of 6 chapters
01Up next

Foundations: Vendor Crisis

Learn structured decision-making when a critical vendor fails

RookieDifficulty 2/5
02Locked

Coordination: Civil Response

Master team coordination during regional unrest

RookieDifficulty 2/5

Complete Foundations to unlock.

03Locked

Technical: Supply Chain Risk

Navigate IT/GSOC coordination under compromise

OperatorDifficulty 3/5

Complete Coordination to unlock.

04Locked

Fusion: Building Systems Attack

Integrate physical, cyber, and intel in real-time

OperatorDifficulty 4/5

Complete Technical to unlock.

05Locked

Executive: Convergent Threat

Protect leadership from multi-vector coordinated attack

DirectorDifficulty 5/5

Complete Fusion to unlock.

06Locked

Insider: Active Investigation

Lead real-time insider threat response with subject on-site

DirectorDifficulty 5/5

Complete Executive to unlock.

02 / FREE PLAY

Choose your pressure test.

Every scenario is available here. No campaign unlock required.

8 SCENARIOS
01

Executive Threat Convergence

CRITICAL

Multi-vector threat targeting executive leadership: cyber reconnaissance, physical surveillance, and vendor compromise converge.

PHYSICALINTELLIGENCECYBERPhysical Access & Identity Management
02

Supply Chain Intrusion

CRITICAL

Building automation vendor compromised by APT group. Life-safety systems at risk, physical security blueprints exposed.

CYBERPHYSICALINTELLIGENCEBuilding Automation & Access Control
03

Insider Threat Investigation

CRITICAL

Privileged employee showing indicators of data theft and external coordination. Real-time investigation with subject on-site.

CYBERPHYSICALINTELLIGENCEUser Behavior Analytics
04

Civil Unrest Response

HIGH

Coordinate multi-regional team response during downtown protests affecting HQ. Practice executive briefings, shift handoffs, and stakeholder management.

PHYSICALINTELLIGENCEContract Security
05

Technology Outage

HIGH

Lead global team through critical platform failure. Maintain operations, coordinate vendor escalation, and influence technology roadmap.

CYBERPHYSICALPSIM Platform
06

Access Control Vendor Ransomware

HIGH

Badge system vendor experiences ransomware attack affecting credential management.

FOCUSED SCENARIOPhysical Access Control
07

Video Management Supply Chain Concern

HIGH

Anomalous network behavior from VMS suggests potential supply chain compromise.

FOCUSED SCENARIOVideo Management System
08

Alarm Monitoring Service Outage

CRITICAL

Third-party alarm monitoring service experiences critical infrastructure failure.

FOCUSED SCENARIOAlarm Monitoring Service

THE PRACTICE

Separate facts.
Surface assumptions.
Own the decision.

Work with timed signals, explicit posture calls, and a documented decision trail. Finish with an after-action review you can examine and export.

Hourglass Command is a training simulation, not a live incident-management system.