Cyber readiness platform

The cyber readiness workspace for rail operations.

RailSecure puts phishing practice, incident drills, response playbooks, and live vulnerability monitoring in one workspace, built around the daily work of a rail security team.

Open the phishing lab Review live CVEs

09
Training modules: Live
NVD CVE feed: Claude
AI assistance: Local
Password tools

Module index

Pick a line

09 modules

LineModulePurpose

01Phishing LabSimulate, score, triageGenerate rail-specific phishing simulations, score analyst reads against hidden red flags, and triage pasted emails.Generate rail-specific phishing simulations, score analyst reads against hidden red flags, and triage pasted emails.02Password StudioLocal-first utilityGenerate and score passwords entirely in the browser, so secrets never leave the device.Generate and score passwords entirely in the browser, so secrets never leave the device.03Incident LabPressure testingRun realistic IT and OT incident narratives, then benchmark your first-response strategy against sector practice.Run realistic IT and OT incident narratives, then benchmark your first-response strategy against sector practice.04PlaybooksResponse designBuild six-phase response playbooks for specific scenarios and compare them against your own drafts.Build six-phase response playbooks for specific scenarios and compare them against your own drafts.05Knowledge QuizAwareness checksFresh multiple-choice checks on hygiene, regulation, and OT awareness with instant scoring and coaching.Fresh multiple-choice checks on hygiene, regulation, and OT awareness with instant scoring and coaching.06Compliance HubRegulation to operationsConnect NIS2, GDPR, CER, ISO 27001, and IEC 62443 to concrete controls, tooling, and awareness planning.Connect NIS2, GDPR, CER, ISO 27001, and IEC 62443 to concrete controls, tooling, and awareness planning.07Vulnerability FeedLive NVD intelligenceSearch and filter live CVEs by severity, window, and KEV status, with plain-English AI explainers.Search and filter live CVEs by severity, window, and KEV status, with plain-English AI explainers.08Reference LibraryOfficial anchorsA curated standards and guidance library, plus a scoped explainer for the parts people get stuck on.A curated standards and guidance library, plus a scoped explainer for the parts people get stuck on.09Awareness WallWhy this mattersReal transport-sector incidents, the patterns that repeat across them, and prompts for tabletop discussion.Real transport-sector incidents, the patterns that repeat across them, and prompts for tabletop discussion.

Quick starts

Where people usually begin

Reporting clocks

The deadlines that shape an incident

24hNIS2 early warning
For a significant incident, send the early warning within 24 hours of becoming aware so the CSIRT or competent authority gets an early signal.
72hNIS2 detailed notification
Follow with the incident notification within 72 hours, including severity, impact, and any indicators of compromise available at that stage.
72hGDPR breach notification
If a personal data breach is likely to create risk for individuals, notify the DPC without undue delay and, where feasible, within 72 hours of awareness.
1moFinal reporting and learning
Under NIS2, expect a final report within one month after the incident notification, then feed the lessons back into controls, comms, and exercises.

In practice

A short loop, repeated often

See the incidents behind it

01
Brief
Ground the session in a real incident or a live CVE.
02
Practice
Run a simulation, drill, or quiz against it.
03
Review
Score the response and read the coaching notes.
04
Improve
Fold the gaps into playbooks and training plans.