Platform profile
Reflex Security: training types, pricing, strengths and limits
Short answer
A crisis simulation that replaces the scripted tabletop: it builds a live crisis from your real environment, runs an adaptive adversary and pressured stakeholders, and produces an after-action report. On the pages we read it sells tabletop and crisis simulation. Not published.
By The Range Desk · Cyber Range Compare · Published 2026-10-11 · Updated 2026-10-13
Desk research from public vendor, standards and regulator pages read on 27 September, 11 October and 13 October 2026. Profiles follow our published method; we did not run the products.
Which training types does Reflex sell?
- RANGE · Cyber range: Not in our sources
- LABS · Hands-on lab libraries: Not in our sources
- CRISIS · Tabletop and crisis simulation: Sold
- AWARE · Awareness training: Not in our sources
- Filled target: the platform sells this training type on the pages we read
- Hatched target: sold with a condition (an add-on, an adjacent product, or part of the type)
- Dashed target: not in our sources (it may exist; we did not find it)
| Type | Status | What the pages describe | Source |
|---|---|---|---|
| Cyber range | Not in our sources | Not described on the pages we read. | None |
| Hands-on lab libraries | Not in our sources | Not described on the pages we read. | None |
| Tabletop and crisis simulation | Sold | Builds the scenario from the organisation's public footprint, can enrich it with telemetry, and runs an unscripted adversary that reacts to each decision. | Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026 |
| Awareness training | Not in our sources | Not described on the pages we read. | None |
What does Reflex check off?
| Check | Status | Note | Source |
|---|---|---|---|
| Hands-on keyboard work | Partly | Technical players can run plain-English queries against simulated logs, endpoint telemetry and network traffic in an Investigation Console; there is no lab library or range. | Source: Reflex Security blog index · Read 11 Oct 2026 |
| Executives and non-technical roles take part | Matches | Built for technical, legal and executive teams; AI agents fill absent seats, including the CEO. | Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026 |
| Built around your own environment or tools | Matches | Reflex states it builds the crisis from your real environment; org context listed as AWS, GitHub, Cloudflare and six more. | Source: Reflex Security homepage · Read 27 Sep 2026 |
| Reports or evidence for auditors, boards or regulators | Matches | An after-action report in which every finding traces to the moment it came from; reports map to SOC 2, ISO 27001 and DORA. | Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026 |
| Price published | Not in our sources | ||
| Free start (free tier, trial or free material) | Not in our sources | ||
| Sessions of an hour or less | Matches | "Sixty minutes, your real environment, no slides." | Source: Reflex Security homepage · Read 27 Sep 2026 |
| Reaches the whole workforce | Not in our sources |
What does it cost?
Not published
Not published. reflexsecurity.io/pricing returned a 404 when we read it.
Source: reflexsecurity.io/pricing (returned 404) · Read 11 Oct 2026
What are the facts?
| How it works | Design, deliver, digest: "builds a live crisis from your real environment, then adapts to every decision". Source: Reflex Security homepage · Read 27 Sep 2026 |
|---|---|
| Self-description | "Multi-agent incident simulation" and an "incident response readiness platform". Source: Reflex Security homepage · Read 27 Sep 2026 |
| Scenario design | Scenarios built from OSINT such as job postings, DNS records and public filings, which Reflex says takes under 15 minutes; threat types shown include AI, phishing, insider and DDoS. Source: Reflex Security blog index · Read 11 Oct 2026 |
| Simulated cast | AI agents play threat actors, journalists, board members, legal counsel and regulators; an AI facilitator, Victoria, joins video calls. Source: Reflex Security blog index · Read 11 Oct 2026 |
| Investigation Console | Plain-English queries against simulated logs, endpoint telemetry and network traffic. Source: Reflex Security blog index · Read 11 Oct 2026 |
| After-action mapping | Findings mapped to MITRE ATT&CK techniques and NIST CSF functions, with timestamps, transcript quotes and logged console queries. Source: Reflex Security blog index · Read 11 Oct 2026 |
| Product tour | A self-guided click-through tour with no signup required. Source: Reflex Security homepage · Read 27 Sep 2026 |
| Facilitation | An AI facilitator inside Zoom, Meet or Teams. Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026 |
| Absent roles | AI agents fill seats nobody takes, including the CEO. Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026 |
| Asynchronous play | Teams can play asynchronously. Source: Reflex Security blog: Reflex Security vs Immersive Labs · Read 27 Sep 2026 |
| After-action | "From threat to after-action, in a single afternoon." Source: Reflex Security homepage · Read 27 Sep 2026 |
| Frameworks named | SOC 2, ISO 27001 and DORA. Source: Reflex Security blog: alternatives · Read 27 Sep 2026 |
What does Reflex say about itself?
What are the strengths?
- Builds the crisis from your own environment and runs an unscripted adversary that reacts to each decision.
- Puts technical, legal and executive teams in one exercise, with AI agents in the seats nobody fills, including the CEO's.
- Short to run: sixty-minute sessions, an AI facilitator in Zoom, Meet or Teams, and an after-action report in which each finding points to the moment it came from.
What are the limits?
- Not a hands-on lab platform or a cyber range: technical players can query simulated logs in its Investigation Console, but there is no lab library and no live-fire range.
- No published price and no free tier.
- Not awareness training: it exercises the response team, not every employee.
Who should consider Reflex?
Consider Reflex if you want to replace the annual scripted tabletop with exercises the response team can run often, or if your gap is decisions and coordination across security, legal and leadership.
Look elsewhere if your main need is cyber range, hands-on lab libraries or awareness training.
How does Reflex sit beside the others?
- BreachRx beside Reflex Security
- Cloud Range beside Reflex Security
- Conducttr beside Reflex Security
- Cyberbit beside Reflex Security
- Cytactic beside Reflex Security
- Hack The Box beside Reflex Security
- iluminr beside Reflex Security
- Immersive Labs beside Reflex Security
- KnowBe4 beside Reflex Security
- Reflex Security beside SimSpace
- Reflex Security beside TryHackMe
Questions people ask
What does Reflex Security sell?
On the pages we read, Reflex Security sells tabletop and crisis simulation. A crisis simulation that replaces the scripted tabletop: it builds a live crisis from your real environment, runs an adaptive adversary and pressured stakeholders, and produces an after-action report.
Does Reflex Security publish a price?
Not published. reflexsecurity.io/pricing returned a 404 when we read it.
Is there a free way to start with Reflex Security?
Not in our sources. We did not find a free tier, trial or free material on the pages we read.
Read next
- Tabletop and crisis simulation
The people who own decisions in an incident work through a scenario and decide what to do, from a scripted discussion to an adaptive simulation.
- Training type finder
Five questions that weigh the four types for your team.
- Platform fact grid
Every platform's facts in one table.