Unsure
Coach
Get one recommended next route based on safe practice goals and local progress.
Learn / Practice
Apply security judgment safely, one fictional case at a time.
Start with one safe fictional exercise. Deeper catalogues stay below the main choices.
Choose Practice Path
Start with one clear action
Use Coach if you are unsure. Use Daily for a quick phone-friendly round. Use Guided Practice when you know the role or skill you want.
Quick
Daily Challenge
Complete one short fictional case that works well on desktop or Android.
Structured
Guided Practice
Follow a short role or skill route for awareness, patching, SOC, evidence, leadership, or business resilience.
More practice options
Browse
Scenario Library
Inspect playable prompts, answers, categories, and related learning paths.
Explore
Practice Library
Browse the broader safe practice catalog and planned playable formats.
Continue
Progress and Practice Report
Review local completion, weak lanes, and a readable practice summary.
Practice Map
What each practice surface is for
These are support paths after the first choice above. They keep quizzes and drills as content formats, not navigation categories.
Before practice
Learn the idea
Open Learn when a term, signal, or workflow concept is unclear.
App loop
Android-facing route
Preview what the Android wrapper opens first: daily practice, coach recommendation, shortcuts, progress, and report access.
Drill formats
Quizzes, choices, and chains
Use quizzes and drills as formats inside Practice. Start here only when you already know the skill you want to exercise.
Live work bridge
Move from practice to action
When a fictional case feels familiar, use the Decision Matrix, Evidence Checklist, or Handoff Center for real work with caveats.
Full Practice Catalog
Open the deeper drill catalog only when you need it
Coach, Daily Challenge, Guided Practice, and Scenario Library are the main doors. The full catalog below is for targeted skill practice.
Show full practice catalog
Learn
Review the vocabulary behind CVSS, KEV, EPSS, PoC, exposure, and source confidence.
Coach
Let the site choose a useful next practice route from Daily, Guided Practice, local progress, role tracks, and focus lanes.
Signal Sorter
Classify clues into exploitation, exposure, remediation, trust, and business signals before deciding action.
CVE Mythbusters
Challenge shortcuts like Critical equals urgent, KEV means exposed, or public PoC proves compromise.
Spot the Overclaim
Practice rewriting statements that overstate compromise, exposure, remediation, attribution, or business impact.
KEV vs EPSS Drill
Practice using known-exploited and exploit-likelihood signals without turning either one into local proof.
Vendor Advisory Quiz
Practice extracting affected scope, fixed versions, mitigations, prerequisites, and owner questions from advisory text.
Scanner Finding Validation Drill
Practice validating scanner output with version proof, plugin context, backports, feature state, exposure, and owner evidence.
CVSS Scoring Drill
Practice vector clues, disputed-score caveats, and why severity is not the whole decision.
Workflow Chain Challenge
Practice moving from advisory text through IOC extraction, normalization, detection drafting, and handoff language.
Evidence Packet Drill
Practice collecting proof before assigning, mitigating, monitoring, escalating, or closing work.
Escalation Scenario Drill
Practice choosing whether a case needs triage, SOC, IR, risk, vendor, or leadership review.
Remediation Closure Drill
Practice choosing patched, mitigated, monitored, not-affected, accepted-risk, or pending-evidence closure.
Leadership Briefing Drill
Practice writing concise executive updates with decisions, owners, blockers, caveats, and next review timing.
Triage Quiz
Choose patch, mitigate, monitor, escalate, or investigate from realistic vulnerability scenarios.
Patch Window Planner
Choose what fits into limited maintenance time while keeping exploitation, exposure, rollback, and owner constraints visible.
Control Matchmaker
Practice choosing compensating controls when patching is blocked, delayed, unsafe, or unavailable.
Handoff Drill
Practice turning a decision into a patch-owner, SOC, leadership, risk, or change message someone can execute.
Scenario Library
Apply the portal path to practical defender situations like no-patch mitigation and SOC handoff.
Decision Matrix
Move from practice into evidence-backed live triage when a real record needs action.
Best For
Pick the practice surface by role
Learn the difference between evidence types before assigning urgency.
Practice when to patch, mitigate, monitor, escalate, or investigate.
Separate PoC, IOC, telemetry, and detection-readiness evidence.
Use myth checks to understand why score alone is not a decision.
Interactive Drills
Choose a scenario and answer with evidence
Each drill gives immediate feedback and points to the next Vuln Signal page or tool to keep learning.
Advanced drill options
Mode
Difficulty
Mixed Run
Question
Select a drill to begin
No active drill yet.
Open Patch Priority, IOC Spotting, or CVSS Metrics to start a short practice round.
Review