Firewall
Filters traffic at the perimeter. Excellent against botnets and commodity malware, close to useless against someone logging in with a valid stolen password.
Rotate your device to landscape for a bigger play field.
What you actually learn
Six controls, six real jobs.
Each control in the game does what its real counterpart does. Pick the wrong one against a threat and it barely scratches it — that mapping is the whole lesson.
Multi-Factor Authentication
Adds a second proof of identity. The reason a leaked password on its own stops being enough to get in.
Encryption
Makes data unreadable without the key. Stolen bytes become worthless bytes — the counter to spyware and exfiltration.
Backup
Tested restore points. In the game, as in reality, a backup is what turns ransomware from a disaster into an outage.
Zero Trust
Every request verified, no implicit trust inside the network. It slows an intruder down at every single step.
Monitoring
Detection. Spyware in this game is literally invisible until something is watching — because you cannot defend what you cannot see.
Threats you will face
The ones that actually show up.
Malware
Malicious code running where it should not. Fast, common, noisy.
Ransomware
Encrypts your data and sells it back to you. Slow, heavy, expensive to let through.
Botnet
Thousands of hijacked machines hitting you at once. Individually weak, collectively overwhelming.
Spyware
Sits quietly and watches. Invisible on the board until you deploy monitoring.
Credential theft
A valid password in the wrong hands. Walks past the perimeter as if it belonged there.
Unpatched vulnerability
A known hole nobody closed. The cheapest way into an organisation.