Put your team inside the incident
SHIFT drops your people into a live cyber storyline, right in the browser. No downloads, no facilitators, no scheduling. They investigate, decide under pressure, and find out what they'd actually do... long before a real attacker does.
What is
SHIFT?
SHIFT is our browser-based digital escape room platform. Players get dropped into the middle of a cyber incident: investigating, hunting, deciding, and dealing with whatever happens next.
Each mission is a story. Suspects, clues, red herrings, and consequences. Players sift through emails, chat logs, dodgy websites and digital artefacts. Sometimes they make phone calls. Sometimes an AI calls them back. Every decision is scored, so you can see how your people actually behave under pressure, not just whether they turned up.
Most teams don't run SHIFT as a one-off. They run it as a programme: four campaigns a year, on a quarterly cadence, because behaviour changes through repetition, not a single afternoon. New scenarios land in your library as they go live.
No app to download. No facilitator to book. No scheduling nightmare. Just a link and a storyline your team won't forget. Run it with ten people tomorrow, or ten thousand next month. Same product, same impact.
Pick your mission.
Prove your skills to a hacking gang by breaking into Wicked Bank. Follow the digital breadcrumbs, exploit the weak spots, and earn your place. The perfect entry point for teams who want to try SHIFT before committing.
An undercover investigation into the DiMarco crime family. Charm your way into private comms, unpick suspicious artefacts, uncover stolen credentials, and stop the syndicate's final move before it detonates something much bigger.
A ransomware attack. Five suspects. Five possible entry points. Work through the logs, the emails, the bad decisions and the red herrings. Then call the hackers and get the decryption key before time runs out.
A catastrophic insurance claim lands on your desk. It's clean, it's compelling, and it's a little too perfect. Players sift through evidence packs, internal comms and suspicious logs to work out whether the claim is real, or part of a very sophisticated fraud.
Not every mission
is a story.
Capture the Flag is SHIFT's competitive layer: short, sharp challenges where players crack a code, dig through open-source intelligence, or hunt down a hidden flag against the clock. They're quick to build and quicker to play, so we can spin a fresh one up around a theme, a team or a moment in days, not months.
A CTF stays open for the whole campaign, with a live leaderboard that turns security into something people actually want to win. They don't touch your credits, so teams keep playing, keep climbing, and keep their instincts sharp in the gaps between the bigger scored missions. That steady, voluntary participation is what a security culture actually looks like.
Why it
actually works.
Most security training fails the moment someone closes the tab. They've ticked the box, forgotten the content, and moved on with their day.
SHIFT works differently. Not because we say so, but because of how stories work. When people are inside a narrative, they engage differently. They're not reading about phishing. They're deciding whether to click a suspicious link for a reason that matters to them in that moment. That's not awareness. That's practice.
The missions demand careful reading, logical deduction and real decision-making under pressure. Players learn to spot red flags across email, chat, voice and fake websites. Not because we told them to, but because the story required it.
No lecture slides. No multiple-choice questions where three answers are obviously wrong. No pop-up telling them they passed. Just a scenario that mirrors the real thing, and the realisation that they nearly fell for it. And when it's over? They talk about it. That's the bit compliance training never managed.
See what
actually changed.
Completion rates tell you who turned up. They tell you nothing about who would actually pause before clicking, question the call, or report the thing that felt off.
SHIFT scores the decisions your people make inside each mission and feeds them into the Behaviour Formula dashboard in Instinct Lab: where your organisation is strong, where it's exposed, and how that moves campaign after campaign. Real behaviour under pressure, not a tick in a box.
It's the difference between proving training happened and proving behaviour shifted. One keeps an auditor happy. The other keeps you safe.
Getting started.
How to run it.
SHIFT runs as an annual licence built around sustained behaviour change, with the flexibility to scale up whenever you need it, plus a bespoke option for when generic won't cut it.
The way most teams run SHIFT. One annual licence covering your organisation, with four campaigns a year on a quarterly cadence, so behaviour builds over time instead of fading after a single session. Every play is scored, and you get a clear picture of how your people performed. New scenarios land in your library as they go live.
Want to run more? Your licence comes with a credit allowance, and you can top up any time to push extra missions out across teams, departments and regions. Capture the Flag challenges don't touch your credits at all. Use SHIFT as much as you like, with no penalty for getting your money's worth.
When you need something built around your organisation, we design a SHIFT experience from the ground up. Custom puzzles, characters, branding and learning outcomes, all built around your specific risks, behaviours and culture. Perfect for large-scale campaigns where generic won't cut it.
No videos. No clicking through.
What is SHIFT?
What is interactive security awareness training?
How is SHIFT different from other e-learning?
How are sessions scored?
What are CTF challenges?
Can we run SHIFT as a campaign?
Does SHIFT measure behaviour change?
See it before
you buy it.
Try The Recruit, our free 15-minute demo mission. You'll see exactly what SHIFT does and how it works. Want to run it with your whole team? Tell us your numbers and we'll get you set up.