Skip to content

What we do

We train your team like they’re actually being targeted.

Our physical escape rooms, virtual experiences and cyber awareness training turn phishing, social engineering and everyday human risk into challenges people can experience, practise and remember.

Services

Three ways to make cyber stick.

In your office

Physical Escape Room

Hands-on cyber challenges that get teams thinking, solving and learning together.

  • Our most interactive and engaging experience.
  • Every player experiences it first hand.
  • A great team-building experience.
  • Direct, hands-on play.
  • Groups of 4–14
  • 1-hour session
  • Intro and facilitated debrief
In the browser

Virtual Escape Room

Interactive cyber challenges that bring teams together, wherever they’re working.

  • Brings your teams together, wherever they are.
  • Any team. Any office. Anywhere.
  • Nothing to install. Just jump in.
  • Teams play over video call
  • 1-hour session
  • Groups of 4–16
The full program

Cyber Awareness Training

Year-long cyber awareness training that keeps security front of mind and builds better habits over time.

  • Cyber basics without the boring bits.
  • Built for ISO 27001 + Essential Eight.
  • 17 domains tracked
  • Reporting by role

Why our approach

You can’t change behaviour
with a slide deck.

Phishing is still the number one way into organisations. Click-next modules haven’t stopped it.

IBM Cost of a Data Breach Report 2026

  • Doing beats watching.

    People remember what they did far longer than what they read.

  • Pressure builds instinct.

    Facing a threat once makes spotting the next one automatic.

  • Fun gets people in the room.

    A dreaded chore becomes the event they talk about.

The rooms

Check out some of our games

Every game is a self-contained scenario with its own setting, puzzles and debrief. Run one on its own, or work through them as a programme.

Poster for Can You Hack It?Beginner

Can You Hack It?

A first run at thinking like an attacker. Teams pick apart a company’s public footprint and find out how much a stranger can learn before they ever send an email.

Teams of 4–6 · about 45 minutes

Poster for DoomsdayIntermediate

Doomsday

The worst day at the office. Ransomware is spreading, the backups look wrong, and the team has to agree what gets saved first — while the clock runs down.

Teams of 4–6 · about 60 minutes

Intermediate

Australia Under Attack

A coordinated strike on national infrastructure. Teams work the control room as power, water and comms begin to fail, deciding what to hold and what to let go.

Teams of 4–6 · about 60 minutes

Poster for The InsiderExperienced

The Insider

A security-awareness game set in one office. Players explore the room, open computers, phones and documents, and work out how an insider got in.

Teams of 4–6 · about 60 minutes

Custom game development

Your organisation, built into the game

Off-the-shelf training teaches off-the-shelf lessons. We design an escape game around how you actually work, so your people rehearse the exact decisions they will face on the job.

  • Your branding and systems
  • Your real incidents
  • Your biggest risks
  • Lessons that transfer straight to workStaff practise on your own systems and processes, so there is nothing to translate back to their day job.
  • Aimed at your biggest risksPut the focus on the threats your organisation actually faces, not a generic list.
  • Your brand, front and centreA game that looks and sounds like you, and that your people remember.
  • Built to run again and againReuse it with every new starter and every team, in the office, the browser or both.

Compliance & evidence

Do compliance. Then prove it.

Most awareness training ends with an attendance list. Every Layer 8 game and quiz feeds the Layered Portal, so you finish with evidence: who covered which standard, how they did, and where to focus next.

See how we prove it
  • Where do our people stand, and is it improving?

  • Show me the training records against ISO 27001.

  • What evidence of awareness training do you have?

  • Have you taken reasonable steps to protect personal data?

FAQ

Questions we get asked

What is a cyber security escape room?

An escape room is a group puzzle game. Players are locked in a room and work together towards one goal, getting out, by solving a series of puzzles. It is a great way to have fun with friends and put your problem-solving skills to the test. A cyber security escape room adds a learning layer: every puzzle is tied to a real cyber security lesson, drawn from the situations people deal with every day. Every game ends with a facilitated debrief that turns what happened into what to do at work.

How long is a session, and how many people can play?

Most sessions run for one hour. That covers a briefing, the escape room itself, a facilitated debrief, time for questions and the reset for the next group. The game usually takes about 30 minutes of that hour, though some rooms run a little longer or shorter. We can run several sessions in a day, so everyone gets a turn. A Physical Escape Room session suits a group of 4 to 14, and a Virtual Escape Room session a group of 4 to 16.

Can remote and hybrid teams take part?

Yes. The Virtual Escape Room runs entirely in the browser, with nothing to install. Each team gets a link, jumps on a video call and plays together, wherever they are. We are always experimenting with new ways to bring teams together.

About the Virtual Escape Room
Do our staff need to be technical?

No. The games are built for everyone, not just the IT team. Hands-on play levels the field, from the graduate to the boardroom. Some of our games are easier and some are harder, so we can match the level of your team.

What do you need from us for a Physical Escape Room?

A meeting room and the people. We bring the props and the facilitator, and turn your room into a working escape room in about an hour.

About the Physical Escape Room
Does this count toward ISO 27001 or the Essential Eight?

We aim to build games that cover topics from ISO/IEC 27001 and the ASD Essential Eight. Each game focuses on different lessons, and no single game covers everything, so the games you choose decide which topics your team works through.

How we prove it
Can you build a game around our organisation?

Yes. Custom Game Development turns your policies, systems and real risks into a game, in four stages: discovery, design, a playtest with your own people, and launch in the office, the browser or both.

About Custom Game Development
Can we try it before we book?

Yes. Our demo runs in your browser, so you can play a game yourself right now.

Play our demo
How much does it cost?

It depends on the format and the size of your team, and we keep our pricing simple and clear. Get in touch with our team and they will help you find a solution that works for you.

Let’s talk

Something else on your mind? Let’s talk.