Welcome to After Action
Cyber crisis readiness platform — facilitated tabletop exercises, 8-dimension readiness scoring, and five auto-generated deliverables shipped within 72 hours of every exercise.
After Action is a full-stack cybersecurity crisis readiness platform that combines tabletop exercise facilitation, rule-based incident response coaching (LLM optional), readiness scoring, compliance mapping, and automated deliverable generation.
What You Can Do
- Run Your First Exercise — Launch a self-service tabletop exercise with AI facilitation in minutes.
- Score Readiness — 8-dimension readiness scoring aligned to NIST SP 800-61.
- Generate Deliverables — Auto-generate IR playbooks, triage checklists, and executive AARs.
- Quantify Risk — Translate exercise gaps into dollar-quantified annualized loss expectancy.
For Developers
- GraphQL API — Endpoint, session and API-key auth, rate limits, an example query and the error shape.
- MCP Server — Read-only Model Context Protocol tools for Claude and other AI agents.
- Authentication — Sessions, two-factor, API keys, scopes and roles.
- Changelog — What has shipped recently.
- Platform Status — Self-reported component status from our own signals.
Platform Overview
After Action serves three audiences:
- Security Teams — Run exercises, track readiness, receive deliverables
- Internal Ops — Manage engagements, facilitate exercises, generate reports
- Insurance Carriers — View client readiness posture and issue certificates
Key Capabilities
| Feature | Description | | --- | --- | | Live Exercise Engine | Facilitator control room + participant war room with real-time inject delivery | | Self-Service Exercises | AI-facilitated exercises without a human facilitator | | 12 Auto-Generated Deliverables | IR playbooks, triage checklists, crisis comms plans, and more | | 8-Dimension Readiness Scoring | NIST 800-61 aligned with dynamic industry benchmarks | | FAIR Risk Quantification | Monte Carlo simulation on exercise gaps | | Compliance Mapping | SOC 2, NIST CSF, ISO 27001, HIPAA, PCI-DSS, HITRUST | | Decision Analytics | Participant leadership scores and confidence trends | | Insurance Certificates | Readiness-backed certificates with risk reduction estimates |