Sign in to Adversary X
Incorrect email or password. Please try again.
Adversary X delivers AI-driven cyber incident tabletop exercises built around real threat actors, documented attacks, and your region's regulatory context — with performance tracking to measure your team's improvement over time.
Get a guided walkthrough with a member of our team. We'll show you how the platform works, walk through a live exercise, and answer any questions about fit for your organisation.
From initial detection to post-incident debrief, Adversary X puts your team through a complete incident response cycle with AI-driven consequences at every turn.
Each scenario is grounded in a documented incident. The threat actor is pre-paired. The attack timeline is real. Your team's decisions are the variable.
Scenarios are based on publicly reported information. Rexon Consulting Ltd has no affiliation with the organisations named and does not claim access to non-public incident details.
Most tabletop tools give you a static scenario and a facilitator. Adversary X gives you a living exercise that adapts to every decision your team makes.
| Adversary X | Typical alternatives | |
|---|---|---|
| AI-driven scenario engine that adapts to your decisions | ✓ | Limited |
| Named APT profiles with full MITRE ATT&CK TTP mapping | ✓ | ✗ |
| 13-region coverage — UK, EU, US, Canada, APAC, Middle East & more | ✓ | ✗ |
| Region-aware regulatory context per exercise (GDPR, NIST, VARA, NCA ECC…) | ✓ | ✗ |
| Scenarios based on real, documented incidents | ✓ | ✗ |
| Scored debrief with strengths and improvement areas | ✓ | Limited |
| Downloadable PDF report per exercise | ✓ | ✗ |
| No facilitator or pre-configuration required | ✓ | ✗ |
| Runs in-browser — no software install | ✓ | Limited |
| Ready to run in under 5 minutes | ✓ | ✗ |
| Flat annual pricing — no per-session or per-seat fees | ✓ | ✗ |
Annual billing. No hidden fees. Cancel anytime.
Everything you need to know before getting started.
Adversary X is an AI-powered tabletop exercise platform for cybersecurity teams. It simulates realistic cyber incidents — from ransomware to supply chain attacks — and puts your team through a structured, scored decision-making process modelled on real threat actor behaviour. Every exercise ends with a scored debrief and a downloadable PDF report.
Adversary X is built for CISOs, security managers, incident response teams, and compliance leads who want to stress-test their team's decision-making without waiting for a live incident. It works equally well for technical and non-technical participants — the platform provides all the context needed to make meaningful decisions.
Most exercises take between 20 and 45 minutes to complete, including the scored debrief. Setup takes under 5 minutes — you choose your threat actor, scenario, severity level, and organisation type, then you're straight into the exercise. There's no scheduling, no facilitator needed, and no minimum group size.
The platform adapts regulatory context to your region. UK users get ICO breach notification obligations (72-hour rule), NCSC reporting, FCA requirements, and NIS Regulations. UAE and Middle East users get VARA guidance. Additional regions are added as the platform expands. In every case, the debrief explicitly identifies which obligations your decisions triggered and whether they were handled correctly.
Each APT profile is based on documented threat intelligence and MITRE ATT&CK mappings. The library includes nation-state groups (APT28, APT29, Lazarus Group, Volt Typhoon), financially motivated actors (LockBit, Cl0p, BlackCat/ALPHV), and opportunistic groups (Scattered Spider, Rhysida). The AI uses each group's known TTPs to drive the scenario narrative — so the attack chain feels authentic, not generic.
Basic (£999/year) gives you access to 6 APT profiles, 6 built-in scenarios, scoring, and a basic PDF report. Pro (£1,499/year) adds the full library of 19 APT profiles, the Real World Attacks library, mid-exercise injects, a custom scenario builder, exercise history, and enhanced PDF reports.
Exercise responses and scoring data are stored securely and associated with your account only. We do not use your exercise data to train AI models. Data is processed in accordance with our Privacy Policy and applicable data protection obligations. Enterprise customers can discuss data residency and retention requirements during onboarding.
Get started today. Your first exercise takes less than 5 minutes to set up.