Rehearse the crisis before it's real.

Tremor brings the crisis to each participant's phone: it rings, messages, emails and news arrive, and every decision is logged with a timestamp. At the end, the report shows where the plan broke.

Ransomware doesn't send a warning

The costliest decisions in an incident happen in the first hours: shut down or not, pay or not, what to tell customers and regulators.

44% 44% of breaches involved ransomware, up from 32% the year before.
of breaches involved ransomware, up from 32% the year before. Source: Verizon DBIR 2025

How an exercise runs

  1. Scenario

    Pick a scenario or generate one with AI from a briefing. The checker flags problems before you publish.

  2. Participants

    Everyone joins from the iOS and Android app or the web, with a sign-in link or SSO, and goes through a readiness checklist.

  3. Exercise

    The facilitator triggers, pauses and resumes. Events arrive as calls, messages, emails, news, posts and decision cards.

  4. Report

    A timeline with every decision and its time, AI grading of answers and an executive summary, in PDF.

What Tremor delivers

A controlled rehearsal of your company's worst week.

  • A phone that rings

    The call arrives as a real call on the phone, in the persona's voice, recorded or synthetic.

  • Simulated channels in the app

    Messaging, email, news, social feed and decision cards, always marked as an exercise.

  • Crisis room

    A team chat during the exercise, with pinned messages, plus a projection screen for the room with no login.

  • AI-assisted scenarios

    Generate from a briefing, import, export and duplicate scenarios, with attachments like logs and ransom notes.

  • Report and evidence

    PDF, CSV and JSON export and the full event log for auditors, regulators and insurers.

  • Built for resellers

    Multi-tenant: resellers manage their own customers, and each level sees only its own data. SSO, MFA and audit forwarding to your SIEM.

Who it's for

  • Executives and board

    Business decisions in a crisis, with incomplete information and time pressure.

  • IT and security

    Containment, recovery and coordination with the SOC and vendors.

  • Legal, compliance and communications

    Notifying regulators and affected people, press and customers.

  • Resellers and MSSPs

    Exercises across your whole customer base, each customer's data kept separate.

Frequently asked questions

What is a tabletop exercise?

An incident simulation where the people who make decisions in a crisis respond, in real time, to a realistic scenario. No production system is touched.

Do participants need to install anything?

To receive calls and messages on their phone, yes: the Tremor app for iOS or Android. They can also join from the web. Access is by link or SSO.

What does the company get at the end?

A report with the timeline, each decision and its time, graded answers and an executive summary, in PDF, plus CSV and JSON export.

Can a reseller run exercises for several customers?

Yes. Tremor is multi-tenant: resellers manage their own customers, and each customer sees only its own data.

Find where the plan breaks, on a day without an incident.

Tell us your company size and the scenario that worries you most. We'll put together the exercise proposal.

Schedule a tabletop