Loading...
AI-Powered
Intelligent scenario generation
Feed the platform your infrastructure details — network topology, tech stack, team structure — and it generates incident scenarios that target your specific weaknesses. Not generic templates.
MITRE ATT&CK Integration
Scenarios aligned with real-world tactics, techniques, and procedures
Compliance Framework Support
HIPAA, GDPR, PCI-DSS, and NIST-aligned training scenarios
Dynamic Complexity Injection
Real-time pivots and unexpected twists to test adaptability
AI Scenario Engine
Live Exercise Mode
Tabletop Exercises
Run realistic incident simulations
Create immersive tabletop exercises that mirror real-world incident response scenarios. Track team actions, decisions, and tool usage in real-time.
Inject Delivery System
Time-based scenario events that unfold during the exercise
Multi-Role Participants
Facilitators, active participants, and observers with distinct permissions
Action & Tool Tracking
Monitor which tools were used and actions taken during response
Analytics
4-dimensional performance scoring
Pass/fail tells you nothing useful. Breakpoint scores your team across four dimensions so you can see exactly where the response broke down.
Time Management
Response speed and deadline adherence
Decision Quality
Correctness of actions and choices
Criticality Response
Handling of critical incidents
Compliance
Regulatory and process adherence
Plus AI-powered recommendations for improvement based on exercise performance.
4D Scoring Engine
AI During Exercises
An AI that runs the room with you
The AI Note Taker joins your Teams, Zoom, or Meet call (or listens in the room) and captures every decision and commitment — with transcription tuned for security vocabulary, from MITRE technique IDs to your own system names. The Exercise AI Agent watches alongside the facilitator and keeps the session honest.
AI Note Taker
Cyber-tuned transcription, decision capture, action items with facilitator review — feeding the after-action report automatically
Live Gap Alerts
Flags unanswered injects and spoken-but-never-actioned commitments while there's still time to steer
Compliance Clocks
Live SEC 4-day, GDPR 72-hour, NIS2 and HIPAA countdowns — practice against the real deadlines
AI Stakeholder Role-Play
Face a demanding CEO, a careful Legal Counsel, a skeptical Regulator, or a persistent Journalist — replies moderated by your facilitator
Every agent output is a suggestion your facilitator approves — with the evidence that produced it. Grounded comms drafts (exec briefs, regulator notifications, status-page posts) mark every unconfirmed fact as a placeholder, never an invention. Included in Professional; free 30-day trial on Starter.
Zero-note-taking AARs
Pay or rebuild?
Ransomware Decision
Rehearse the decision nobody wants to make cold
Your team hits a ransom demand mid-exercise with a countdown running. Six courses of action get priced against what your environment is actually worth — and the payment options stay locked until sanctions screening, counsel and insurer consent are resolved, because until then they may not be lawfully available at any price.
Six options, not two
Restore, rebuild clean, pay for a decryptor, pay for suppression, hybrid, or retire the systems — each costed the same way
Legal gates first
A blocked option shows no figures at all — teams learn the obligations before they reach for the money
Paying keeps the rebuild
A key returns data, not control. The model always carries eradication — and shows the cost if the key never works
The resilience business case
The same incident recosted at target backup and infrastructure-as-code coverage — a one-page brief your board can act on
Scored on process, never on the verdict: a documented, properly authorised decision scores higher than an instinctive one whichever way it goes. Breakpoint does not recommend paying — it shows the exposure and the obligations, and leaves the call with the people accountable for it.
The full toolkit
Infrastructure Diagramming
Visual network diagram editor to map your infrastructure and understand incident impact during exercises.
Scenario Version Control
Track changes to scenarios over time with full version history and rollback capabilities.
Organization Management
Multi-tenant architecture with organization-level settings, member management, and role-based access control.
Enterprise SSO
Plug into your existing identity provider — Okta, Azure AD, Google Workspace. One login, no extra credentials to manage.
Custom RBAC
Set up roles that match how your org actually works — who can create scenarios, who can run exercises, who can view results.
Audit Logging
Every action, change, and login is logged. Pull audit reports for SOC 2 reviews or internal investigations.
MITRE ATT&CK Mapping
Automatic technique coverage tracking aligned with the MITRE ATT&CK framework.
Progress Tracking
Monitor team improvement over time with historical performance data and trend analysis.
API Access
RESTful API for integrations with your existing security tools and workflow automation.
Integration
Integrate with your existing tools
Breakpoint works alongside your current security stack. Export data, trigger workflows, and build custom integrations.
Export Options
PDF reports, CSV data, and JSON exports
Webhooks
Real-time notifications for exercise events
REST API
Full API access for custom integrations
See it for yourself
Run your first tabletop exercise free. No sales call required — just sign up and go.