Who is behind SecDrills
SecDrills is a SaaS platform for cyber tabletop exercises (crisis simulations) based on the ENISA exercise methodology. It is built for mid-sized organisations in the EU that fall under NIS2 or DORA, and for their sites abroad. SecDrills is operated by BlueGravitas GmbH, based in Voitsberg, Austria.
Why SecDrills exists
NIS2 and DORA demand more than security measures on paper. Organisations must show that their crisis and emergency procedures have actually been rehearsed. In practice this often fails because of the effort: building scenarios in PowerPoint, booking an external facilitator, writing the minutes afterwards. With SecDrills the exercise runs guided in the browser, and you can repeat it as often as you like. The after-action report is produced automatically and serves as evidence for NIS2, ISO 27001, DORA and TISAX.
Our method
SecDrills follows the ENISA Cybersecurity Exercise Methodology. We assign roles along the European Cybersecurity Skills Framework (ECSF). Every exercise consists of a scenario, of injects, that is new situation updates, and of the evaluation in the after-action review. Everyone exercises in the role they hold in a real incident, from IT to management to communications. What you rehearse are decisions, reporting paths and working together under time pressure. How an exercise is built in detail is explained on the page Cyber tabletop exercise.
The company
SecDrills is a product of BlueGravitas GmbH, based in Voitsberg (Styria, Austria) and registered in the commercial register under FN 678630 k at the Regional Court for Civil Matters Graz. We work from Austria and follow the NIS2 transposition in the member states where our customers and their sites operate. The full provider details are in the imprint.
| Operator | BlueGravitas GmbH |
|---|---|
| Registered office | Voitsberg, Austria |
| Managing directors | Thomas Kutschi, Herwart Wermescher |
| Commercial register | FN 678630 k, Regional Court for Civil Matters Graz |
| Market | Mid-sized organisations in the EU (100 to 500 employees), with a focus on Germany, Austria and Switzerland |
| Method | ENISA Cybersecurity Exercise Methodology, roles along the ECSF |
Managing directors
BlueGravitas GmbH is run by Thomas Kutschi and Herwart Wermescher. The two are responsible for the product and the operation of SecDrills. You reach us directly at hello@secdrills.com or on LinkedIn. We reply within two working days.
Who we work for
SecDrills is built for mid-sized organisations that must rehearse their response to cyber attacks in a way they can prove. That mainly concerns IT and security leads, ISMS and compliance officers, incident response and SOC teams, and management. Consultants and auditors can also use SecDrills for their clients. Many of our customers run sites in several countries, which is why this English version of the site exists: so that colleagues abroad can read the same information.
Talk to us
Take the readiness check in two minutes, or request a demo. We get back to you within two working days.