Interactive 3D exercises across phishing, GDPR compliance, OWASP Top 10 for LLM & Agentic AI, OWASP Privacy Risks, and real-world incident case studies. Free to play, no sign-up required.
46 exercises · Build a security-first culture with interactive exercises covering phishing, social engineering, device security, and more.
Spot a phishing email before you click.
Survive a ransomware attack in real time.
Recognize manipulation before you comply.
Handle a realistic voice phishing call.
Spot an AI-generated executive on a video call.
Think twice before plugging in that USB drive.
21 exercises · Master GDPR compliance with hands-on exercises covering data protection, breach response, and privacy by design.
Triage a breach and meet the 72-hour notification clock.
Navigate transfer mechanisms for data leaving the EEA.
Process a data subject access request end to end.
Build compliant opt-in flows that regulators accept.
Redact personal data from documents before disclosure.
Run a DPIA for a high-risk data processing activity.
21 exercises · Prepare for AI-powered threats including prompt injection, deepfake attacks, and LLM manipulation.
Stop an AI assistant from leaking data via hidden prompts.
Stop a hidden prompt from hijacking your AI assistant mid-task.
See what happens when confidential data enters a consumer AI tool.
Extract hidden instructions from a customer-facing AI chatbot.
Stop an autonomous AI agent from being redirected by a poisoned email containing hidden instructions.
Investigate a compromised AI agent that appears functional while silently performing unauthorized actions and evading monitoring.
2 exercises · Learn from actual security breaches. Walk through the MGM Resorts attack, BEC fraud cases, and more.
Relive the 10-minute helpdesk call that cost $100M.
Trace a real BEC scam built on weeks of inbox surveillance.
Security awareness training is a structured education program that teaches employees to recognize, avoid, and report cybersecurity threats in their daily work. Topics include phishing email detection, ransomware response, social engineering defense, password security, device protection, GDPR compliance, and AI-powered attack recognition.
RansomLeak delivers this training through interactive 3D simulations where employees practice inside realistic attack scenarios rather than watching passive videos.
This catalogue organizes 90+ free exercises into four categories: Security Awareness (46 exercises across 10 courses covering phishing, ransomware, social engineering, and more), Privacy and Compliance (21 exercises including GDPR and OWASP Top 10 Privacy Risks), AI and LLM Security (21 exercises covering the OWASP Top 10 for LLM Applications and Agentic AI), and Real-World Incidents (2 case studies from documented breaches). All exercises run in the browser with no sign-up required.
Analytics dashboards, SCORM export, SSO, custom branding, and compliance reporting for your organization.