Work the full incident, end to end
Trace what happened, understand the scope of the attack, contain it, and work through eradication as the exercise unfolds.
Live breach giveaway
Think your IR team canhandle a rogue AI agent?
We're giving six security teams a free three-hour Live Breach exercise to find out. Work the incident end to end. Find the threat, scope the attack, contain it and eradicate it, all on TryHackMe infrastructure.
Apply for your teamApplications close 18 October.
What you get
Three hours. One live breach.Your team has to stop it.
Your team will take the incident from first alert through scoping, containment and remediation — making the calls needed to bring the attack under control.
Run safely on TryHackMe infrastructure
Your own systems aren't touched. Choose from a range of commercial SIEM and EDR tools per exercise.
Contain and remediate together
Your IR team works the investigation as one — making decisions, coordinating the response, and driving the incident to remediation.
Get a clear view of IR readiness
Your post-exercise report shows how the team performed, where gaps surfaced and what needs to improve.
Why live breach?
29 minutes. That’s the response window your teams are up against.
The average eCrime breakout time is 29 minutes. Live Breach puts your team into a realistic incident where they have to investigate what happened, understand the scope and bring the attack under control.
Adversary Fluency
Experience realistic threat behaviour firsthand.
Proactive Defence
Find response gaps before a real breach exposes them.
Who can apply
Is your team ready to put its response to the test?
Live Breach is built for security teams responsible for investigating and responding to incidents together.
- 6teams will be selected
- 5–10people per team, approximately
- 3 hrsthe exercise runs live
- THMeverything runs on TryHackMe infrastructure
Apply for your team
Applications close 18 October. Selected teams are notified the week of 20 October.
Put your team forward
Complete the form below to apply for the Live Breach exercise.
Loading application form…
By applying, you agree to the giveaway terms and conditions