Incident library
5 free scenarios · 7 premium. Upgrade to unlock the full library.
The Very Urgent Invoice
An 'urgent' invoice email lands in the shared ops inbox at 4:57pm on a Friday. Morty is panicking. Rick is judging.
Just Approve It Already
Morty's phone won't stop buzzing with MFA approval prompts. It's 02:14. He didn't try to log in.
Something in the Car Park
A shiny unbranded USB stick is lying next to Morty's parking space. He wants to 'return it to its owner'.
Portal Gun Coffee WiFi
Morty joins cafe WiFi before accessing admin dashboards. Rick suspects the access point is wearing a fake moustache.
The Password That Got Schwifty Everywhere
A breach dump contains Morty's old forum password, which also opens a work tool. Rick is unimpressed by password nostalgia.
The Ex-Employee with a Portal Key
A former contractor still has working SaaS access two weeks after leaving. Morty calls it awkward; Rick calls it negligence.
The Server That Refused to Evolve
A public server is missing a critical patch. Rick says the CVE has been old enough to rent a car in some dimensions.
Two Ricks, One Admin Password
The rack room admin account is shared by five people and one sticky note. Attribution has left the dimension.
All Your Racks Are Belong To Us
Monitoring lights up red. File shares are being renamed .locked. A note appears on every screen in the NOC.
The App That Wanted Everything
Morty finds an OAuth app asking to read mail, contacts, and files. Its logo is a dancing plumbus.
The Vendor Portal From Dimension C-137-ish
A trusted supplier sends a software update outside the normal channel. Rick hates surprise binaries almost as much as bureaucracy.
The Board Wants Answers Before Breakfast
A major incident hits revenue systems and the board wants a decision in 20 minutes. Morty made a slide with too many skull emojis.