CyberSec Games
CyberSec Games provides physical card games and kits that turn cybersecurity training into interactive, team-based experiences. Their threat modeling games, such as Elevation of Privilege, prompt developers and security teams to identify risks during system design using the STRIDE framework. The company also offers custom game production services and supports hybrid teams with remote play options.
- Cybersecurity
- Education Technology
- Gaming & eSports
- Hardware
- Enterprise Software
Funding
Founders
Founder details are not available yet.
Product
Problem
Traditional cybersecurity training often relies on passive methods like presentations and policy documents, which fail to change behaviors or foster deep understanding. Teams struggle to identify security risks early in the development process because standard approaches don't encourage the critical, collaborative thinking needed to uncover vulnerabilities before code exists.
Solution
CyberSec Games provides physical card games and kits that turn cybersecurity education into interactive, team-based experiences. Their threat modeling games, such as Elevation of Privilege, prompt developers, architects, and security experts to ask "what could go wrong?" while systems are still being designed, shifting security left in the development lifecycle. The games create a shared structure for discussing risk, allowing product managers, junior engineers, and security specialists to contribute equally. Sessions produce concrete outputs like prioritized risk lists or clearer threat models, making security discussions more productive and memorable than traditional training methods. The company also offers Croupier, a software tool that deals cards from threat modeling games online for hybrid teams, enabling asynchronous engagement with content.
Target Audience
Primary customers are software development teams, security professionals, and organizations seeking to improve their threat modeling and security awareness practices through collaborative, hands-on training. The games are also used by product managers, junior engineers, and security specialists who need to contribute equally to security discussions.
Features
- Elevation of Privilege card game with 88 cards structured around STRIDE threat categories (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege)
- Backdoors & Breaches: Core Deck, an incident response game where one player acts as Incident Captain while Defenders work together using detection cards, discussion, critical thinking, and a d20 roll
- Byte Club card game that teaches players to decide whether to hack or not in various situations
- Croupier software tool that accepts a list of names and assigns cards randomly to players for online play with hybrid teams
- Play-to-learn workshop kits with ready-made system architecture and guided exercises
- Fully custom game production services for unique cybersecurity challenges, including branded decks for organizations
- Physical card format that allows players to reorder, group, and sense-make with cards in private without the constraints of structured digital spaces