Securitas Quest
Case-based cybersecurity experience

Every incident is a case file.

Securitas Quest is a future investigation format for cybersecurity learning: clues, conflicting signals, branching decisions, and consequences that teams must explain.

Open a conversation Review the case

Unusual access pattern

Multiple signals point to one account. None of them are conclusive alone.

Stakeholder pressure

Business wants continuity. Security wants containment. Legal wants certainty.

22:14 auth anomaly
22:19 mailbox rule created
22:27 external forwarding
22:41 decision pending
Decision point

Escalate or observe?

The next step changes the path, the cost, and the confidence of the investigation.

Not a quiz. Not a lecture. A case to investigate.

Quest is designed around ambiguity. Participants do not simply choose the “correct” answer. They follow evidence, make assumptions visible, and decide what to do with incomplete information.

1

Clues

Logs, messages, alerts, business context, and weak signals form the case.

2

Branches

Each decision opens some paths and closes others. The investigation moves forward.

3

Consequences

Teams see how timing, escalation, containment, and communication change the outcome.

Built for uncertainty, communication, and judgment.

The experience can support incident response workshops, executive exercises, investigation training, and cross-functional security discussions.

Case element A

Evidence is incomplete.

Participants must decide whether they have enough signal to act, escalate, or wait.

Case element B

Pressure is real.

Business continuity, legal exposure, reputation, and operational risk affect each choice.

Case element C

Assumptions matter.

The debrief focuses on what the team believed, missed, challenged, and communicated.

Case element D

The path is visible.

The final case review shows how decisions shaped the investigation and the outcome.

A future format in the Securitas Labs ecosystem.

Securitas Board is the first active product direction. Quest is reserved for a later, more narrative investigation-based experience.

Interested in scenario-based cybersecurity investigations?

We are exploring formats that help teams practice not just what to do, but how to think, communicate, and decide during uncertain incidents.

hello@securitaslabs.eu