| Weighted score | | | |
|---|
| Realism (22%) | Crisis simulations with dynamic injects and AI actors players can question, built around the customer's playbooks; a separate range runs live attacks on the customer's own tools. | Builds the scenario from the organization's public footprint, can add its telemetry, and runs an unscripted AI adversary that reacts to each decision. | Crisis Control mixes scenario waves, injects, emails, news and social updates; six documented baseline scenarios, tailored on request. |
|---|
| Cross-team (20%) | Crisis Sim targets executives, incident leaders and cross-functional teams; Cyber Drills exercise technical and business teams together. | Designed to put technical, legal and executive teams in one exercise; AI agents fill seats for absent roles, including the CEO. | Separate formats for executives and for cross-functional groups spanning executives, SOC, IT, legal and communications. |
|---|
| Evidence (16%) | Decision-level measurement, a Resilience Score, benchmarks across teams and cohorts, and evidence against frameworks such as NIS2 and DORA. | After-action report generated at the end, each finding traced to the moment it came from, mapped to SOC 2, ISO 27001 and DORA. Less board benchmarking than iluminr. | Ends with a 'Golden Report', an action roadmap and technical annexes on the attack chain. |
|---|
| Effort to run (14%) | AI Program Builder drafts scenarios in minutes, but a multi-product platform needs more program ownership than a single-purpose tool. | Scenario in minutes, a sixty-minute session, and an AI facilitator that joins Zoom, Meet or Teams; asynchronous play is supported. | Platform-led with facilitator guidance and tailoring, arranged through a demo; more preparation than a self-serve generator. |
|---|
| Hands-on depth (12%) | Browser labs against live systems across AI, application, cloud, OT and offensive security; Dynamic Threat Range uses tools such as Sentinel, Elastic, Splunk and CrowdStrike. | No labs or live-fire range. Technical staff make decisions in the exercise; they do not do keyboard work. | Academy modules, Professional Labs, machines and CTFs, plus optional hands-on investigation inside the tabletop. |
|---|
| Breadth and free access (8%) | Labs, drills, ranges and crisis simulations for audiences from non-technical staff to SOC analysts and executives. | A scenario generator rather than a content library, with no free tier or community. | 4.3m+ learners, a free start on HTB Academy, and certifications listed from $490. |
|---|
| Pricing (8%) | No price published. | No price published; access is through a demo. | Professional plan published at $2,500 per seat per year; the other business plans are not priced publicly. |
|---|
| Formats | Tabletop and crisis simulation, Live-fire range, Hands-on labs | Tabletop and crisis simulation | Tabletop and crisis simulation, Hands-on labs |
|---|
| Audiences | Executives and board, Incident response team, SOC analysts, Whole company | Executives and board, Incident response team | Executives and board, Incident response team, SOC analysts |
|---|
| How it is delivered | Browser-based platform (Immersive One) | AI facilitator inside Zoom, Meet or Teams; asynchronous play supported | Online platform; Crisis Control tabletops are platform-led with facilitator guidance |
|---|
| Free access | Not published | No free tier | HTB Academy free start; Lite plan 14-day free trial |
|---|
| Published price | Not publishedNot published, contact sales. | Not publishedNot published, contact sales. Access is through a demo. | Professional plan $2,500 per seat per year ($250 per seat per month); other plans not publishedProfessional plan published. Lite, Base and Ultimate plans and Crisis Control are not priced publicly. |
|---|