awesome-security-card-games
github.com/Karneades/awesome-security-card-games ↗A curated list of security card games.
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me incident response resources from awesome-security-card-games"
Installation instructions →What's inside
Incident Response
- Backdoors & Breaches
An incident response card game. It helps you conduct incident response tabletop exercises and learn attack tactics, tools, and methods.
- Defensomania
An incident response card game for security monitoring and incident response teams to discuss priorities, possible response actions and attack scenarios.
Application Security
- Cornucopia
OWASP® Cornucopia is a threat modeling tool in the form of a card game to assist software development teams identify security requirements in Agile, conventional and formal development processes. It's based on OWASP's Top 10, ASVS/MASVS/MASTG, CAPEC and SAFECode. The
Cryptography
- Crypto Go
An educational card game designed to teach up to date symmetric cryptography. Crypto Go deck consists of cards representing modern cryptographic tools.
Threat Modeling
- Cumulus
A threat modeling card game for the clouds which helps you find threats to your DevOps or cloud project and teaches developers a security oriented mindset.
- Elevation of Privilege (EOP) by Microsoft
A card game based on Microsoft's threat modeling framework "STRIDE" (Spoofing, Tampering etc.). The
- Security Cards
A card game encouraging to think broadly and creatively about computer security threats. Four dimensions are covered: Human Impact, Adversary's Motivations, Adversary's Resources, Adversary's Methods.
Various Resources
- Game On: Tabletop Games to Teach Cyber and Information Security Concepts
List of tabletop games to teach cyber and information security concepts.
- Tabletop Security Games & Cards
List of security card games created and maintained by Adam Shostack.
- Tabletop Simulations to Improve Your Information Security Program
Red Canary's write-up about tabletop exercises for information security programs.
Data Privacy
- Know your risks
Learn what information is safe to share online and understand the risks. Learn about whether to share, not share or be cautious with different pieces of information.
Showing a sample of 11 resources. View the full list on GitHub →