NetSimIT

NetSimIT is a browser-based, gamified cyber-attack simulator: configure a network topology and defensive posture, then run a scripted attack playbook against it in real time, making phase-by-phase response decisions as the incident unfolds on a live topology diagram.

• Four network topology tiers — from a simple 7-node network to a 39-node multi-site estate
• Ten fully-branched attack playbooks (ransomware via phishing, supply chain compromise, DDoS extortion, state-sponsored APT, and more), each with three phases and two choices per phase
• Six defensive posture toggles — SOC, MDR, CTI, Vulnerability Management, Compliance Guard, Incident Response
• Six per-asset response actions — emergency patch, isolate/quarantine, reset credentials, enhanced monitoring, restore from backup, or take no action
• Auto-pivoting attack cascade logic when a phase is breached
• Crisis Communications module — internal, external and regulatory statements, timing-judged

• Live colour-coded topology diagram with animated attack-path pulses and node status (nominal/under attack/compromised/secured)
• Compliance tracking against five real-world frameworks — NCSC CAF, Cyber Essentials Plus, the Cyber Resilience Bill, NIST CSF 2.0, and SOC 2 Type II
• Live colour-coded Security Operations Log
• Session debrief on reset, for facilitator-led review

• Runs entirely in the browser — no backend, no database, one Docker container
• Facilitator Guide + Player Guide make it ready to run as an instructor-led tabletop exercise out of the box
• Lets a security team feel the consequences of a defensive posture choice before they make it for real

NetSimIT runs standalone as a training tool — it doesn't exchange data with the other Synapse applications today.