Move and aim
Use arrows or WASD. Hold up to fire diagonally; hold down on the ground to crouch below incoming fire.
PROTOCOL 011 // LIVE INCIDENT
RUN. INVESTIGATE. CONTAIN.
THREAT HUNT // LIVE INCIDENTRECEPTION BREACH
FIELD LIVES ◆◆◆
MOVE LIKE AN ARCADE.
THINK LIKE A HUNTER.
The movement is immediate and physical: run, crouch, jump onto server racks and bridge platforms, choose upper or lower routes, fire horizontally or diagonally, collect weapon upgrades and charge one screen-clearing evidence EMP.
Four power-ups
Press J or Z to fire. Collect Spread Scan, Rapid Patch, two-shot Burst Forensics and a temporary Defence Shield.
Jump and climb
Press K, X or Space for Mavis’s normal jump. Land on raised cyber infrastructure to dodge fire or reach a safer route.
Evidence EMP
Contain threats to fill the scan meter. At 100%, press L or C to clear hostile pulses and damage visible threats.
A COMPLETE SIX-LEVEL MISSION.
NO DOWNLOAD REQUIRED.
What kind of browser game is this?
Threat Hunter is a free side-scrolling action game built for desktop and mobile sessions. Six escalating levels combine responsive running, normal jumping, raised platforms, crouching, diagonal aiming, projectile dodging, four power-up types and a voiced final boss encounter. Players travel from the Reception Breach through the Endpoint Corridor, Cloud Archive, Identity Transit and Recovery Stack before reaching the DirtyPhish Core.
What makes the main character different?
Instead of a conventional action hero, the playable character is Mavis Byte, a 59-year-old senior admin who becomes the workplace incident responder. Her experience with normal visitors, calls and office routines helps her identify what does not belong, follow the evidence and protect the organisation one level at a time.
What does the game teach?
The enemies are fictional digital processes, not people. Each one represents a recognisable stage of an attack, including phishing, malicious execution, stolen cloud sessions, lateral movement, ransomware and data theft. The arcade mechanics introduce threat hunting, evidence collection and incident containment without pretending to replace professional training.
THE ALERT IS A CLUE.
NOT THE WHOLE CASE.
Threat hunting is the disciplined search for malicious behaviour that may have bypassed preventive controls or remained hidden among normal activity. The game exaggerates that search into arcade action; the investigation cycle below is real.
Ask a focused question
A useful hunt begins with a testable idea such as: “Could a stolen session token be used from an unmanaged device?” The question determines which evidence matters.
GAME METAPHOR // The sector briefing identifies the likely attack method and objective.Collect reliable evidence
Hunters examine identity logs, endpoint events, network flows, DNS records, email evidence and cloud audit activity. Missing telemetry can be a finding itself.
GAME METAPHOR // Every contained process adds evidence to Mavis’s incident chain.Connect behaviour over time
One event may be harmless. A new sign-in, unusual process, rare destination and sensitive-file access occurring together may describe an attack path.
GAME METAPHOR // Different enemy classes represent stages of one connected breach.Contain and improve
Confirmed activity is escalated through the incident process. Teams isolate systems, revoke access, block infrastructure and improve detections using what the hunt revealed.
GAME METAPHOR // The evidence EMP contains active threats and opens the path forward.KNOW WHAT YOU’RE HUNTING.
Phishing Drone
Represents deceptive messages, fake sign-in pages and malicious attachments attempting to create the first foothold.
Malware Trooper
Represents unfamiliar processes, scripts and payloads executing on an endpoint after initial access.
Rogue Process Hound
Represents fast automated activity moving between devices or aggressively searching for additional access.
Ransomware Enforcer
Represents destructive encryption, service disruption and attempts to remove an organisation’s recovery options.
WHY MAVIS?SECURITY STARTS
SECURITY STARTS
BEFORE THE SOC.
An administrator or a receptionist may recognise an unfamiliar visitor, unusual courier, fake executive request or caller who does not understand normal company procedure. That human context is valuable security evidence. Employees should have a clear, blame-free way to pause, verify and report suspicious behaviour.
Threat hunters do not work alone. Useful investigations connect technical evidence with knowledge from service desks, administrative teams, fraud specialists, system owners, cloud engineers and the people who understand how the organisation normally operates.
THREAT HUNTER FAQ.
What is Threat Hunter: Front Desk Zero?+
It is a free original side-scrolling run-and-gun browser game. Players control senior admin Mavis Byte across six arcade levels with raised routes, cyber enemies, weapon modules, defensive power-ups and a final DirtyPhish boss battle.
Is Threat Hunter free to play online?+
Yes. Threat Hunter is a free browser arcade game with no purchase, download or account required. Open the page, choose Start Threat Hunt and play immediately.
Can I play Threat Hunter on a phone or tablet?+
Yes. The game includes an on-screen direction pad plus Pulse, Jump and EMP buttons for touchscreen play. Desktop players can use the keyboard.
What type of game is Threat Hunter?+
It is a single-player side-scrolling action game with run-and-gun movement, platform jumping, upper and lower routes, projectiles, four upgrade types, six environments and a final boss. Its visual direction is inspired by colourful mid-1990s arcade action without copying an existing game.
Who is Mavis Byte?+
Mavis Byte is an original fictional 59-year-old senior admin who uses her knowledge of people, routines and the workplace to help investigate a digital breach.
What is cybersecurity threat hunting?+
Threat hunting is a proactive search for evidence that an attacker or malicious activity may already exist in an environment. Hunters form a hypothesis, examine relevant evidence, test it and document what they discover.
How is threat hunting different from automated detection?+
Automated detections alert on known rules, patterns or models. Threat hunting uses human curiosity and context to investigate gaps, unusual relationships and behaviour that existing alerts may not explain.
Why is the main character an administrator?+
Administrators understand normal visitors, deliveries, urgent requests and internal routines. That context can help identify unusual behaviour. Good security includes people across the organisation - not only technical teams.
Does defeating enemies represent attacking real people?+
No. Every enemy is a fictional digital process, malicious payload or attack signal. Mavis uses an evidence-pulse scanner to identify and contain simulated threats.
Can this game replace formal threat-hunting training?+
No. It is a short awareness game and conversation starter. Professional threat hunting requires authorised access, reliable telemetry, documented methods and trained analysts.