Start Mission Control → You have 90 seconds. An entry from CISA's Known Exploited Vulnerabilities catalog becomes the backdrop for a fictional incident. The game does not scan your network.
Three decisions, one report
First comes detection: before acting, find out whether the affected product and version are actually deployed. Next the game simulates suspicious logs: the safer choice is to contain the affected system and preserve evidence. Finally, apply the vendor patch or mitigation and verify service and logs. Each sound decision earns 100 points. At the end you can save the report as a PNG or share your result.
CVEs, vendors and required actions come from the CISA KEV catalog. The questions and network display are an educational simulation. Catalog deadlines apply to US federal agencies; for a real incident follow your organization's procedures and vendor guidance.
The n8n workflow
- Webhook: receives a request for a new mission.
- HTTP Request: reads the public CISA KEV JSON feed.
- Code: selects a recent entry, limits its fields and builds the mission record.
- Respond to Webhook: returns the CVE, product, description, action and three phases as JSON.
Download the n8n workflow → Activate its webhook after importing. No API credentials are needed. The public demo uses scenarios generated from the CISA feed during the site build, so it starts instantly without downloading the catalog for every player.
Why make this a game?
A CVE table informs you. A decision under pressure helps you remember the sequence. The timer, animated network and final report make the drill short and shareable, with no account or personal data required. For real systems, start with the exploited-vulnerability pages and vendor bulletins.
Play the mission or explore all n8n workflows.