RTable

Tabletop exercises that stick.

RTable runs interactive incident-response tabletops, captures participant input as structured data, and turns each exercise into measurable improvement, not a one-time slide deck.

Readiness becomes something you can measure, and train against.

Now in beta

Request early accessExplore Training →
RTable interactive incident-response tabletop platform

The Open Security Experience

Get stronger every cycle.

RTable is the Improve stage of the Open Security Experience: structured tabletops that leave evidence, scores, and a path into training instead of a Word doc that vanishes.

  1. 01DiscoverFind what is exposed.
  2. 02ValidateProve what is exploitable.
  3. 03See & actPrioritize and remediate.
  4. 04ImproveRTableStrengthen readiness.

The problem

Standard tabletops leave no evidence behind.

The conversation happens, a Word doc lands weeks later, and nobody sees whether the team actually learned. Readiness stays anecdotal until the next incident makes the gap obvious.

Conversations vanish

Facilitators run the exercise, notes scatter across slides and side threads, and the lessons never become comparable data.

Scoring is inconsistent

Without a structured framework, each tabletop scores differently. You cannot compare readiness quarter over quarter.

Training does not follow

Gaps surface in the room but die in the report. There is no durable path from exercise findings to measurable improvement.

How RTable works

Rehearse the worst day. Keep the evidence.

RTable sits at Improve, but it draws on what you already know from Discover, Validate, and See & act, so exercises rehearse the attacks that would actually hit you.

01 · Discover

Rehearse the environment you actually have.

Scenarios are tailored to your threat model and the exposure you already know, not a generic script that could belong to anyone.

The exercise starts from your surface, not a stock storyline.

Exercise setup

3 roles · 1 scenario

Scoped

  • Ransomware in OT-adjacent IT

    Scenario

    New

  • Incident commander

    Role

  • Comms lead

    Role

  • Plant operations

    Role

    Changed

  • Legal / exec

    Role

02 · Validate

Pressure-test the plan before someone else does.

Interactive facilitation puts decisions under stress. The first ransomware event should not be the first time the team finds out whether escalation works.

You learn which decisions hold, and which are still a hypothesis.

IR playbook · hour 2

Containment call

Same finding

On paper

Unrehearsed

Containment call

  • Playbook exists
  • Roles assumed
  • Never timed under pressure

In the room

Rehearsed

Containment call

  • Decision captured
  • Gap scored
  • Owner assigned
  • Ready to train

03 · See & act

Capture input as structured evidence while it is happening.

Participant responses become data, not facilitator recollection weeks later. Gaps are visible, assignable, and ready to close.

Lessons learned survive the exercise.

RTable capturing structured participant input during a tabletop
  1. Response captured
  2. Gap logged
  3. Owner
  4. Follow-up

04 · Improve

See readiness become measurable.

Consistent scoring makes readiness comparable across teams and quarters. Gaps point into Training so the next cycle is stronger than the last.

A durable record of whether the team actually got better.

Readiness over time

ScoreConfidenceTrendTraining path

Readiness, in view

See readiness become measurable.

RTable interactive incident-response tabletop platform
  • Scenario
  • Participant input
  • Decision point
  • Score
  • Gap to train
  • Readiness trend

When you need it

Built for teams who train hard and still cannot prove it.

RTable is the measurable Improve step, useful after an incident, before a board asks, or when tabletops keep disappearing into documents.

Playbooks written, never rehearsed?

Tools are deployed and plans exist, but nobody knows whether detection fires, escalation works, or recovery holds.

The first incident should not be the first test.

Board asking if the team is ready?

Anecdotes from last year’s tabletop are not a readiness story. Leadership wants comparable scores and a trend.

Show whether the team got stronger, with evidence.

After-action that evaporated?

The exercise happened. Notes scattered. Nobody can say what to train next quarter.

Structured evidence outlives the room.

Training that does not follow the gaps?

Generic courses do not close the specific decisions that failed in the last exercise.

Measure the gap, then train against it.

The difference

Structured evidence, not a Word doc that vanishes.

Most tabletops are a conversation. RTable turns the conversation into data you can compare and train against.

Readiness, measured.

Facilitator judgment still decides what matters. The software keeps the proof.

Traditional tabletop

  1. Conversation in the room
  2. Notes scatter
  3. Word doc weeks later
  4. No comparable score

RTable

  1. Interactive scenario
  2. Structured participant evidence
  3. Consistent scoring
  4. Path into Training

Human in the loop

The table creates leverage. Facilitators create confidence.

RTable captures input and scores it consistently. AI can be a second pair of eyes. The facilitator’s judgment still decides what the exercise meant, and what the team should do next.

Technology creates leverage. Operators create confidence.

RTable

  • Interactive scenario
  • Structured capture
  • Consistent scoring
  • Readiness trends

Open Security facilitators

  • Scenario design
  • In-room judgment
  • What the score means
  • What to train next

Readiness you can defend

  • What broke under pressure
  • Who needs rehearsal
  • Whether the team improved
  • Where Training goes next

Close the loop

Improve is how the experience starts again stronger.

RTable does not ask you to buy the entire platform. It does make Discover, Validate, and See & act more valuable, because the next cycle rehearses what you already proved, and Training closes the gaps the room revealed.

  1. 01Discover
  2. 02Validate
  3. 03See & act
  4. 04Improve
  • Exercises use the exposure and response reality you already have.
  • Scores make readiness comparable across quarters.
  • Gaps become Training, not a forgotten appendix.

How you engage

Measure the gap. Then train it.

RTable and Training are the Improve pair: structured tabletops that leave evidence, then hands-on range work aimed at the exact decisions that failed.

RTable

Interactive incident-response tabletops with structured evidence, scoring, and readiness tracked over time.

Request early access

Training

A cyber range and custom content that close the gaps each exercise reveals, so the team is stronger next cycle.

Explore Training

The Open Security Experience

Readiness is one part of knowing you’re secure.

  1. 01DiscoverSirius + Sirius ProFind the exposure.
  2. 02ValidateAludraProve what is exploitable.
  3. 03See & actOpen Security PortalPrioritize and remediate.
  4. 04ImproveRTable + TrainingStrengthen readiness.

Stop letting tabletops disappear into a document.

Talk to an operator about early access to RTable: structured evidence, consistent scoring, and a path from the room into Training.

Request early accessExplore Training