For companies with 50 to 300 people
Your cyber insurance renewal asks if you tested your incident response plan. In 15 days, the answer is yes, in writing.
A 3-hour facilitated tabletop exercise for your leadership team, plus an after-action report and a signed attestation that the exercise took place. Three hours of your team’s time, start to finish.
(We reply within one business day.)
Trusted by people at
02launch.com
Nespresso
Align Tech
University of Maryland
MEETH
COLOSSUS
Sparrow
Eckerd College
Stetson University
What you are actually paying for
You can generate a tabletop scenario in thirty seconds. You can generate an after-action report template just as fast. Neither one is what your carrier is asking for.
A witness, not a document
Your carrier is not asking you to produce a report. They are asking you to demonstrate that something happened, and they want a credible third party to confirm it. Software cannot be a witness. This is why auditors still exist in a world that has accounting software.
Someone who makes the room answer
A chatbot can ask whether you would pay the ransom. It cannot make your CFO and your Managing Partner disagree out loud and then land on a decision. The discomfort is the product. The report is what is left over.
An outsider who can say what your IT lead cannot
Your IT manager already knows what is broken. He cannot tell the CEO the plan does not work without it sounding like a budget request. We can, and it lands differently.
The exercise is the thing. The document is the receipt.
Features
What we do.
Facilitated cybersecurity tabletop exercises for the leadership teams of mid-sized companies.
Scenarios
Realistic, evolving exercise scenarios tailored to your industry, risk profile, and response plans.
Multi-Team Simulations
Run exercises across executive, operations, and technical teams in one coordinated session.
Facilitator Tools
Guided injects, timing controls, and live scoring keep exercises structured and on track.
After-Action Reporting
Clear, exportable reports document performance, gaps, and recommendations for every exercise.
Fits Your Existing Programs.
Mytabletops works alongside the incident response and business continuity plans you already have in place.
The Carrier Acceptance Guarantee
If your insurance carrier, broker, or auditor comes back and says your after-action report does not meet their documentation requirement, we revise it until it does. No extra fee, no time limit, no argument.
This is the whole reason you are buying. It should not be your risk to carry.
Program Tiers
Three fixed-price packages. Know exactly what you get and what it costs before you commit.
Trusted by Crisis Ready Teams
Real outcomes from organizations that have run tabletop exercises and crisis simulations with Mytabletops.
Frequently Asked Questions
Clear answers about how we build, run, and secure your tabletop exercises.
Is our organization's data safe during an exercise?
Yes. Exercise data stays private to your organization and is never used to train public AI models. You control what scenario details are shared and with whom.
Can this work alongside our existing crisis plans?
Yes. We build scenarios around your existing incident response and business continuity plans, so exercises test the plans you already rely on.
How long does it take to run an exercise?
Scenario design typically takes 1 to 2 weeks. Most tabletop sessions run 2 to 4 hours, with a written after-action report delivered shortly after.
Does this replace live drills or trained facilitators?
No. Mytabletops supports your facilitators with better scenarios and tools. Trained personnel and real-world drills remain an essential part of readiness.
Who owns the exercise materials afterward?
You do. Scenarios, reports, and recommendations are yours to keep and reuse for future training.
See a Tabletop Exercise in Action.
Book a 30-minute walkthrough. We’ll show you how a scenario runs from start to after-action report.
No aggressive sales pitches.
Speak directly with an exercise designer.
![](data:image/svg+xml,<svg display="block" role="presentation" viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><path d="M 84.696 4.513 C 84.131 1.692 81.875 0 79.054 0 L 55.924 0 L 57.052 16.925 L 43.512 16.925 L 44.641 0 L 20.946 0 C 18.125 0 15.869 2.257 15.304 4.513 L 0.072 83.495 C -0.492 86.88 2.329 90.265 5.714 90.265 L 38.999 90.265 L 40.691 62.057 L 59.873 62.057 L 61.565 90.265 L 94.286 90.265 C 97.671 90.265 100.492 86.88 99.928 83.495 L 84.696 4.513 M 41.256 50.774 L 42.384 28.208 L 57.052 28.208 L 58.18 50.774 Z" fill="rgb(0, 0, 0)" height="90.26487091533448px" id="AvKBS1GVe" transform="translate(0 5)" width="100px"/></svg>)
Receive a clear deployment roadmap.