Every day, CISA catalogs the vulnerabilities attackers are actively exploiting. Every day, ThreatDrill turns the top one into a timed incident-response drill. Sixty seconds a decision. Answers lock. First attempt counts.
Free on iPhone. The daily drill never costs anything; Premium unlocks every lesson.



Live CISA Known Exploited Vulnerabilities with real CVSS severity from NVD, plus security headlines from trusted outlets — served through our backend, updated all day.
An incident-response simulation generated from the day's threat. Timed decisions, locked answers, expert rationale — and a spoiler-free result you can share anywhere.
47 full-depth lessons across nine paths. Seven core paths align to CompTIA Security+ (SY0-701) objectives — fundamentals, networking, cloud, AppSec, governance, industrial/OT — and two advanced tracks align to the CISSP and CISA exam domains, written from the leader’s and the auditor’s seat.
Every lesson has a deep question bank; every path ends in a final assessment. Fresh draws and shuffled options every attempt — you can't memorize your way through.
Complete a path and pass its final to earn a badge and certificate — with one-tap “Add to LinkedIn profile.” Honest wording, always: course completion, not certification.
Free tier: the Daily Threat Drill, live threat intel, streaks, and the first lesson of every path. Premium unlocks everything else.
Three minutes a day, pressure included.
ThreatDrill builds a scenario from the newest actively-exploited vulnerability in CISA's catalog. You're the analyst on duty.
Assess, prioritize, remediate, hunt, close out. Answers lock when you commit — and running out of time is a decision too.
Expert rationale on every choice, a result card built for sharing, and a streak that's waiting for you tomorrow.
Structured, sequential, and honestly labeled.