A fast daily cybersecurity strategy game where every trusted route can become an attack path. Spend limited resources, protect critical territory and keep the business running.
Black Current, a ransomware crew, has breached the corporate estate. You have seven rounds to contain the outbreak without stopping the business.
Containment is a prioritisation problem. Patch Dominion turns a corporate network into connected territory, then makes you choose between security resources, critical assets and operational continuity. The winning move is rarely to spend everything in one place.
Start by identifying and isolating affected systems. Protect clean segments, revoke compromised access, prioritise actively exploited weaknesses and recover from clean, tested backups only when the environment is ready. CISA advises organisations to immediately isolate impacted systems and notes that segmentation can limit lateral movement.
Use your approved incident response plan in a real event. Patch Dominion is an educational simulation, not an operational playbook.
Read the CISA StopRansomware Guide ↗Segmentation separates business units and technology zones with controlled traffic rules. In the game, isolation stops spread immediately but reduces continuity. In practice, planned segmentation can restrict lateral movement before an incident begins.
A long vulnerability list does not tell you what to fix first. Combine active exploitation, external exposure, asset importance and likely impact. CISA's Known Exploited Vulnerabilities Catalog is one useful input for risk-based remediation.
Endpoint detection and response can identify suspicious behaviour, contain activity and give responders evidence. It is not guaranteed protection, which is why the game treats EDR as a strong probability rather than an invincibility shield.
Cloud accounts, email systems, remote workers and suppliers depend heavily on identity. Revoking tokens, disabling risky accounts and strengthening authentication can close routes that malware controls alone may miss.
Backups support recovery only when they are protected, monitored and tested. The UK NCSC recommends regular backups of important files and checking that restoration works as expected. Recovery does not replace containment.
Emergency isolation can protect the wider organisation, but critical services may be interrupted. Good response planning defines who can make that decision, which services must be preserved and how teams communicate during the event.
Prioritise vulnerabilities that attackers are actively exploiting, especially when they affect internet-facing or business-critical systems. Then consider exposure, available mitigations, asset value and operational constraints. A severe score alone does not describe the full risk.
The game represents those factors with territory risk, attack paths and limited security credits. Protecting a high-risk database can matter more than patching several low-impact endpoints.
Explore the CISA KEV Catalog ↗Patch Dominion is a free daily cybersecurity strategy game. You defend a corporate network by patching systems, isolating segments, deploying endpoint protection, blocking risky accounts and restoring clean backups before an outbreak spreads.
Identify affected systems, isolate them quickly, protect clean segments, revoke compromised access, preserve evidence and restore from tested clean backups under an approved incident response plan. Exact actions depend on the incident and organisation.
Network segmentation divides an environment into controlled zones. Rules between zones limit unnecessary traffic and trusted paths, which can restrict lateral movement and reduce the number of systems reached by an intruder.
Prioritise weaknesses that are actively exploited, reachable by attackers and present on critical assets. CISA recommends using its Known Exploited Vulnerabilities Catalog as an input to risk-based vulnerability prioritisation.
Taking a device, account or network segment offline can stop an attack from spreading, but it can also interrupt legitimate work. Incident response teams balance rapid containment with safety, critical services and operational impact.
No. Backups support recovery, but they do not stop initial access, credential theft or lateral movement. Organisations also need prevention, detection, containment and tested restoration procedures.
Yes. The game uses the current UTC date to create the same outbreak and opening positions for every player that day, which makes scores directly comparable.
No. Patch Dominion is an original cybersecurity learning game built around incident containment. It takes broad inspiration from fast territory-control strategy games but uses its own map, controls, scoring, artwork and security mechanics.
Yes. Every territory and response control supports touch input, and the command map adapts to phone, tablet and desktop screens.