Train on today's real threats.
Every day, CISA catalogs the vulnerabilities attackers are actively exploiting. Every day, ThreatDrill turns the top one into a timed incident-response drill.
Sixty seconds a decision. Answers lock. First attempt counts.
Free on iPhone. The daily drill never costs anything; Premium unlocks every lesson.
Real threat intelligence, not stale examples
Live CISA Known Exploited Vulnerabilities with real CVSS severity from NVD, plus security headlines from trusted outlets — served through our backend, updated all day.
One scenario a day. Everyone gets the same one.
An incident-response simulation generated from the day's threat. Timed decisions, locked answers, expert rationale — and a spoiler-free result you can share anywhere.
Nine paths, exam-aligned
47 full-depth lessons across nine paths. Seven core paths align to CompTIA Security+ (SY0-701) objectives — fundamentals, networking, cloud, AppSec, governance, industrial/OT — and two advanced tracks align to the CISSP and CISA exam domains, written from the leader’s and the auditor’s seat.
2,350 exam-grade questions
Every lesson has a deep question bank; every path ends in a final assessment. Fresh draws and shuffled options every attempt — you can't memorize your way through.
Badges that go on LinkedIn
Complete a path and pass its final to earn a badge and certificate — with one-tap “Add to LinkedIn profile.” Honest wording, always: course completion, not certification.
The daily drill is free. Forever.
Free tier: the Daily Threat Drill, live threat intel, streaks, and the first lesson of every path. Premium unlocks everything else.
How the drill works
Three minutes a day, pressure included.
The day's threat arrives
ThreatDrill builds a scenario from the newest actively-exploited vulnerability in CISA's catalog. You're the analyst on duty.
Five decisions, 60 seconds each
Assess, prioritize, remediate, hunt, close out. Answers lock when you commit — and running out of time is a decision too.
Score, learn, share
Expert rationale on every choice, a result card built for sharing, and a streak that's waiting for you tomorrow.
The learning paths
Structured, sequential, and honestly labeled.
Train on today's real threats.
Download on the App StoreThreatDrill badges and certificates recognize completion of in-app training only — they are not professional certifications and imply no accreditation. Learning paths reference CompTIA Security+ (SY0-701), ISC2 CISSP, and ISACA CISA exam outlines as independent study aids; ThreatDrill is not affiliated with or endorsed by CompTIA, ISC2, or ISACA. Live threat data is drawn from the CISA Known Exploited Vulnerabilities catalog and the National Vulnerability Database (public data); ThreatDrill is not affiliated with CISA or NIST.