Demo
Spend 90 seconds with Atlas.
You'll walk through three injects on a sample scenario. At the end, download the AAR — the same artifact a real exercise produces.
1 · Pick a scenario
Default is the public-sector anchor. Swap to match your world.
- PublicSelected
County Election Systems — Ransomware 14 Days Before the General
Your county BoE's ePollbook vendor reports a confirmed ransomware encryption event 14 days before the November general election. Walk the room through containment, COOP activation, and public communication under HSEEP.
- Financial
FFIEC Wire Fraud — The Examiner's Favorite FI Tabletop
A community bank's wire room authorizes a $2.3M outbound after a spoofed CEO thread. Walk the FFIEC IT Handbook IR sequence, hit the NYDFS 72-hour clock, and produce the evidence packet your examiner asks for.
- Regulated
Wire Fraud via BEC — The Auditor's Favorite SMB Scenario
A finance lead authorizes a $187K wire to a 'new vendor' after a CEO email thread that turns out to be a BEC. Run the response your SOC 2 / cyber-insurance underwriter wants documented.
- MSP
MSP Client Ransomware — Multi-Tenant Blast Radius
A ransomware event at one of your managed clients turns out to share a tenant boundary with three others. Walk the partner playbook for containment, customer comms, and cross-tenant notification.
- SMB
SMB Ransomware Readiness — The Tabletop Your Carrier Asked For
Your file server starts encrypting on a Sunday night. No regulator is calling, but your cyber-insurance carrier wants documented evidence of a tested IR plan at renewal. Run the exercise that produces it.
- Non-profit
Donor PII Exposure — Non-Profit Cyber-Grant Reporting
A misconfigured S3 bucket exposes 11 years of donor records. Walk the response under non-profit cyber-grant reporting requirements and donor trust constraints.
2 · Atlas presents three injects
Each inject ends with a constrained decision.
Running County Election Systems — Ransomware 14 Days Before the General for the Publicsegment. In v1 the inject surface is a stub — the live Atlas handshake lands in Phase 3.5 (per IA Section 10). Until then, this page explains the flow and links to the sample AAR so visitors can still see the artifact.
Inject 1 of 3 — T+00:22 · Your first escalation arrives. Do you (a) confirm the incident, (b) acknowledge without confirming, or (c) defer to your internal lead?
Decision capture + Atlas response will activate when the Atlas agent ships (Phase 3.5).
3 · Download the sample AAR
The artifact is the conversion event.
Visitors leave with a branded, 1-page AAR PDF containing their actual decisions from the demo plus the framework crosswalk.