Skip to main content

A curated list of security card games.

173
GitHub Stars
11
Curated Resources
6
Categories
4 hours ago
Last Refreshed
Application SecurityCryptographyData PrivacyIncident ResponseThreat ModelingVarious Resources

Use this list with your AI agent

Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:

"Show me incident response resources from awesome-security-card-games"

Installation instructions →

What's inside

Incident Response

  • Backdoors & Breaches

    An incident response card game. It helps you conduct incident response tabletop exercises and learn attack tactics, tools, and methods.

  • Defensomania

    An incident response card game for security monitoring and incident response teams to discuss priorities, possible response actions and attack scenarios.

Application Security

  • Cornucopia

    OWASP® Cornucopia is a threat modeling tool in the form of a card game to assist software development teams identify security requirements in Agile, conventional and formal development processes. It's based on OWASP's Top 10, ASVS/MASVS/MASTG, CAPEC and SAFECode. The

Cryptography

  • Crypto Go

    An educational card game designed to teach up to date symmetric cryptography. Crypto Go deck consists of cards representing modern cryptographic tools.

Threat Modeling

  • Cumulus

    A threat modeling card game for the clouds which helps you find threats to your DevOps or cloud project and teaches developers a security oriented mindset.

  • Elevation of Privilege (EOP) by Microsoft

    A card game based on Microsoft's threat modeling framework "STRIDE" (Spoofing, Tampering etc.). The

  • Security Cards

    A card game encouraging to think broadly and creatively about computer security threats. Four dimensions are covered: Human Impact, Adversary's Motivations, Adversary's Resources, Adversary's Methods.

Various Resources

Data Privacy

  • Know your risks

    Learn what information is safe to share online and understand the risks. Learn about whether to share, not share or be cautious with different pieces of information.

Showing a sample of 11 resources. View the full list on GitHub →