Exercises
A drill runs the whole chain on a real vulnerability of the product, with a simulated exploitation signal. It is the way to rehearse the 24 hour clock before it matters.
Drills
How a case is marked
Live incident
Dark frame, outlined tag, real deadlines. Submissions are real and recorded with their platform reference.
EXERCISE
Yellow frame on every screen of the case, striped banner, filled tag. Nothing is ever sent.
What the exercise mode enforces
- The banner and the yellow frame stay on every screen of the case, including the report drafts.
- Every draft file and every issue carries the DRILL marker. Recorded submissions say that nothing was sent.
- The fix still goes through the real merge request, pipeline, scans and production approval, so the drill exercises the whole chain.
- Exercise cases never count toward the live totals on the overview.