Tabletop exercises your whole team can run, without a consultant.
AI-supported tabletop exercises built from your actual infrastructure. Run them solo, led by a facilitator in the room, or live with up to 8 participants. No booking lead time, no external facilitator, and a debrief that recommends specific changes to your plans.
Exercises are expensive to run, hard to coordinate, and most organisations do them once a year, or never.
External tabletop facilitation costs £1,500–£5,000 per session. Booking it requires finding a consultant, agreeing a date three months out, and persuading half your team to clear a morning. The result: most organisations run one exercise per year, which is nowhere near enough to build genuine muscle memory.
BastionIQ Exercise makes exercises so easy to run that there's no reason not to do them quarterly, monthly, or after every significant infrastructure change.
Three ways to run an exercise
Start small on your own, run a session in the meeting room, or bring the whole response team together live.
Practise on your own
Work through the scenario at your own pace. After each response, the AI coaches you on what you got right, what to consider and what to think about next.
Run it in the room
You lead the session with your team around the table, and the AI suggests discussion prompts to keep the conversation moving.
Live, with up to 8 people
Participants join a live session from wherever they are while the facilitator controls the pace. Everyone adds rich-text cards for each discussion point, and the AI joins as a participant to flag coverage gaps.
From scenario selection to debrief report
Choose a scenario and mode
Pick one of nine cyber or business continuity and disaster recovery (BC/DR) scenarios, then run it solo, facilitator-led or collaboratively.
Get injects built for your environment
Each inject (a new development in the scenario) is tailored to your infrastructure register, so the exercise references your real systems.
Work through it together
Respond as the scenario unfolds. In collaborative sessions, the AI synthesises the discussion after every inject.
Review the debrief
Get a debrief report covering what went well, gaps and recommendations. It reviews each linked plan and recommends specific changes.
Nine scenarios, tailored to your infrastructure
What's included in Bastion Exercise
MITRE ATT&CK mapping
Every cyber scenario inject carries a MITRE ATT&CK tactic and technique with a plain-English explanation, so your team understands the attacker behaviour behind each development.
Injects tailored to your infrastructure
Injects reference the systems in your infrastructure register, so the exercise reflects your actual environment rather than a generic script.
Structured debrief reports
What went well, gaps and recommendations. The debrief reviews each linked plan and recommends specific changes, and you decide what to update.
Exercise scheduling
Plan your exercise calendar and send email reminders to the members you select, so exercises actually happen.
Exercise preparedness score
A score on your dashboard that rewards recent exercises, breadth across cyber and BC/DR scenarios, and variety of session modes.
Evidence for compliance
Completed exercises count as evidence in Bastion Comply, and are flagged for review once they’re more than 12 months old.
Completed exercises count as compliance evidence. See Bastion Comply →
More exercises per year, at no additional cost per session
External facilitation costs £1,500–£5,000 per session. BastionIQ Exercise is £42/month as an add-on, meaning exercises run on BastionIQ's built-in AI for the cost of a fraction of one consultant session. Move from annual to quarterly, or quarterly to monthly, without adding budget.
Run your first exercise today.
Free 30-day trial of all modules, no credit card. Exercise is included in the trial.