Welcome to After Action

Cyber crisis readiness platform — facilitated tabletop exercises, 8-dimension readiness scoring, and five auto-generated deliverables shipped within 72 hours of every exercise.

After Action is a full-stack cybersecurity crisis readiness platform that combines tabletop exercise facilitation, rule-based incident response coaching (LLM optional), readiness scoring, compliance mapping, and automated deliverable generation.

What You Can Do

  • Run Your First Exercise — Launch a self-service tabletop exercise with AI facilitation in minutes.
  • Score Readiness — 8-dimension readiness scoring aligned to NIST SP 800-61.
  • Generate Deliverables — Auto-generate IR playbooks, triage checklists, and executive AARs.
  • Quantify Risk — Translate exercise gaps into dollar-quantified annualized loss expectancy.

For Developers

  • GraphQL API — Endpoint, session and API-key auth, rate limits, an example query and the error shape.
  • MCP Server — Read-only Model Context Protocol tools for Claude and other AI agents.
  • Authentication — Sessions, two-factor, API keys, scopes and roles.
  • Changelog — What has shipped recently.
  • Platform Status — Self-reported component status from our own signals.

Platform Overview

After Action serves three audiences:

  • Security Teams — Run exercises, track readiness, receive deliverables
  • Internal Ops — Manage engagements, facilitate exercises, generate reports
  • Insurance Carriers — View client readiness posture and issue certificates

Key Capabilities

| Feature | Description | | --- | --- | | Live Exercise Engine | Facilitator control room + participant war room with real-time inject delivery | | Self-Service Exercises | AI-facilitated exercises without a human facilitator | | 12 Auto-Generated Deliverables | IR playbooks, triage checklists, crisis comms plans, and more | | 8-Dimension Readiness Scoring | NIST 800-61 aligned with dynamic industry benchmarks | | FAIR Risk Quantification | Monte Carlo simulation on exercise gaps | | Compliance Mapping | SOC 2, NIST CSF, ISO 27001, HIPAA, PCI-DSS, HITRUST | | Decision Analytics | Participant leadership scores and confidence trends | | Insurance Certificates | Readiness-backed certificates with risk reduction estimates |