Problem
Many smaller organizations know they need to test incident response plans, but realistic tabletop exercises can feel too complex, too expensive, or too technical to start.
Incident Response Readiness
TabletopForge
A browser-based tabletop exercise generator for small businesses, MSPs, IT teams, and cybersecurity students.
What I Built
- Scenario builder for phishing, BEC, ransomware, insider threat, cloud misconfiguration, vendor breach, and compromised admin account exercises.
- Generated summaries, objectives, participant lists, discussion questions, IRP gap-discovery prompts, facilitator notes, executive summaries, and lessons-learned templates.
- Browser-based saved exercises using LocalStorage, with copyable and downloadable Markdown outputs.
Tools
Next.js 15TypeScriptTailwind CSSshadcn-style UILocalStorage
Security Value
The project turns incident response planning into a guided exercise that helps reveal missing escalation paths, unclear decision authority, weak communication templates, and gaps in lessons-learned tracking.
What I Learned
This project pushed me to think beyond alerts and tools. A useful security product also has to help people make decisions under pressure, document those decisions, and convert findings into remediation work.