Team at the What The Hack! security awareness game with game board, smartphone, and digital display

Team-based Security Awareness Training with Gamification for IT Security, Data Protection & Compliance

The serious business game for interactive awareness training – suitable for online training, in-person sessions, or facilitated awareness events.

German OSPA Winner 2026 – Award for What The Hack!

Winners of the 2026 Germany OSPAs

In the category: Outstanding New Security Product

More about the award

Book a game demo

Team-based Security Awareness Training with Gamification for IT Security, Data Protection & Compliance

The serious business game for interactive awareness training – suitable for online training, in-person sessions, or facilitated awareness events.

Winners of the 2026 Germany OSPAs

In the category: Outstanding New Security Product

More about the award

Book a game demo

Team-based
Awareness Training with Gamification for
IT Security, Data Protection & Compliance

The serious business game for interactive awareness training – suitable for online training, in-person sessions, or facilitated awareness events.

Winners of the 2026 Germany OSPAs

In the category: Outstanding New Security Product

More about the award

Book a game demo

DORA lettering within a circle of European stars

NIS2 lettering in a circle of European stars

Security Awareness Training as an
intuitive Serious Business Game

For training on cybersecurity, phishing, data protection, compliance, ISO 27001, NIS2, and DORA.

What The Hack! turns training content into a shared gaming experience for a vibrant security culture.

30–45 minutes

Team or solo

Online or in person

Awareness Platform

Conduct recurring security awareness training independently – as a team or solo. Featuring flexible topic campaigns and documented results.

Request platform →

Facilitated Team Awareness Events

Let employees play, discuss, and make security decisions together during Security Days, workshops, and events.

Request event →

Digital What The Hack! game board on a laptop and phishing question on a smartphone

How awareness training works with What The Hack!

Discuss a practical scenario as a team

First, everyone locks in their answer; if there is disagreement, it will be discussed.

Exchange perspectives and reach a shared decision

Alternatively, play solo and build your knowledge over time.

Correct answer? Earn tokens and stop the hacker!

Instantly see the impact of your decision.

Developed by CISOs and CSOs with practical experience

What The Hack! is not an agency product. It is a security awareness tool developed directly by the tech department of an energy corporation through the engagement of the affected target group itself.

You can immediately tell how practical this serious business game is, making it an indispensable part of our customers' successful awareness strategies.

Certificate from Assurance Cert International for the awareness and training format What The Hack!, valid from February 2, 2026 to February 1, 2030

Externally audited: What The Hack!

Practical · Targeted · Proven

Audit Criteria: BSIG · DORA · ISO 27001

More about certification ↗

Cyber Awareness Events
have suitable occasions all year round

What The Hack! offers more than 30 specialist campaigns throughout the year. Sometimes, however, awareness can be more than a training session: seasonal formats add variety, create memorable moments and can help employees engage more actively with security awareness.

Seasonal What The Hack! campaigns: Cyber Month, Hack-O-Ween, Hacky Christmas, Kick-off, and Easter Hack Hunt

Click here for the event experience

Security Awareness for Cybersecurity, Data Protection, and Compliance

From safely managing cyber risks to data protection, compliance, ISO 27001, NIS2, and DORA: What The Hack! brings essential training topics to life in a playful way. Your employees discuss real-world scenarios, make decisions, and work together to build an understanding of responsible practices.

Cybersecurity Training

Recognize cyber risks and act securely in everyday work: With What The Hack!, you raise your employees' awareness of phishing, social engineering, and other digital threats. Interactive, practical, and powered by genuine gamification.

Discover cybersecurity training ↗

Online team meeting with What The Hack! in Microsoft Teams and a question about social engineering

Data Protection Training

Data protection starts with everyday decisions. What The Hack! turns the responsible handling of personal data into a shared learning experience – and raises awareness of the GDPR and data privacy across your company.

Discover data protection training ↗

Participants discuss during the What The Hack! team game with a game board and smartphones

Compliance Training

Knowing the rules is just the beginning. Applying them in everyday work requires good judgment. With What The Hack!, your employees discuss challenging situations and practice acting with integrity and responsibility.

Discover compliance training ↗

German OSPA 2026: Certificate for What The Hack! as Outstanding New Security Product

GERMANY OSPAs 2026 · WINNERS

Germany's Security Product of the Year 2026

What The Hack! wins at the Germany Outstanding Security Performance Awards 2026 in the "Outstanding New Security Product" category.

With What The Hack!, we turn security awareness into a shared experience: people discuss realistic situations, weigh arguments, and make decisions. Game moves, tokens, and the challenge of defeating the hacker bring momentum to the training.

This award is a special recognition of our approach — and an incentive to continue advancing serious business gaming.

More about the award

Gameplay

The game has three phases – it takes 30-45 minutes in total.

Collect tokens

Discuss practical scenarios as a team and learn from one another

With the right solution, you will receive tokens and moves

Phishing question in the What The Hack! game with colored tokens

What The Hack! on two smartphones with a security question and hacker attack in the game

Whether it's cyber security, compliance or data protection

Defend against attacks

Your decision has consequences - just like in real life. Make the right choice and track down the hacker.

Playable on smartphone or desktop.

Reach the goal

Catch the hacker!

Only teams that earn tokens and moves can stop the hacker before time runs out. After the game, results and—depending on the agreed setup—certificates of participation are available to support internal documentation.

Results screen from a What The Hack! round showing points, tokens and correct answers

Score display of a What The Hack! game round with points, tokens, and correct answers

User team wins!

User team successfully completed the mission.

Contact

Key features

For Teams & Individuals

Available for teams of 3-12, for single players and awareness events for 20-500 employees

High replay value

Rotating questions, diverse themed campaigns, high scores, and strategic token actions create new challenges for repeated playthroughs.

Digital or hybrid

Playable as an app-based board game or pure online version

Quick, intuitive start

Simply jump in, play together, and focus on safety questions and discussions—without spending time learning complex rules.

Customizable

Questions can be flexibly adapted to the company's threat situation. The game is offered in the respective corporate design or corporate identity.

AI Features

AI-driven hackers, an AI moderator, and AI hint systems support the awareness experience as needed.

Real scenarios

Hybrid threats create a realistic gameplay experience

Highest quality content

The questions are created together with experts

What Our Customers Say

“I found What The Hack! entertaining and immediately noticed that it made me more attentive. Cybersecurity no longer felt like a dry mandatory exercise, but like real teamwork. Absolutely recommended!”
Florian S.
Field CTO EMEA in the Tech Industry
"I joined the What The Hack! Tournament expecting an interesting security challenge, but it turned out to be even more fun than I anticipated. The combination of teamwork, creative thinking, and friendly competition made for a great experience. A big thank you to everyone involved for the excellent collaboration. Our hacker opponents certainly had a tough day"
Maryam J.,
Security Engineer in the Public Sector
"The NIS2 training was really fun thanks to the moderators and the participants. The special thing: It was not primarily about cyber security knowledge, but about people from different areas thinking through scenarios together and learning from each other. It was really fun!"
Reza A.,
Management
“Admittedly, I was initially skeptical when I was spontaneously invited to play What The Hack! at the NIS2 Congress in Frankfurt. But the playful approach to examining security incidents and risk assessments from new perspectives—and discussing those perspectives with other participants—was surprisingly insightful and inspiring.”
Andreas M,
Managing Consultant
"What the Hack! manages to convey an important and complex topic such as IT security in a playful and at the same time very practical way. The students are highly motivated, discuss with each other and often want to continue playing directly, because each round opens up new situations, strategies and perspectives. It is particularly valuable to me that the game has an effect beyond the classroom: the learners question their own behavior and deal more consciously with risks and dangers in the digital world.“
Moritz Ringhoff,
Lübbecke Vocational College.
"The children in my primary school class found WTH very motivating, as the playful aspect and the competitive nature inspired everyone to defeat the hacker. Because the class works together as a team and has to reach an agreement whenever there are differences, it gets all the children talking with one another about the current question. As a result, children explain things to other children, which is often more rewarding than when adults do it. Weaker students are supported by their team members so that everyone can participate in the game. For questions that the entire class answered incorrectly, it's great that What the Hack! provides the students with a child-friendly explanation, allowing everyone to benefit from wrong answers and learn new things as well."
Phyllis Wiechert,
Bünningstedt Primary School.
"More fun: The students were thrilled that their knowledge is not only asked in an exam, but is part of an immersive experience. In addition, developing a campaign yourself is exactly the practical application of the learning material that you would like. Positive change: Playing the game clearly showed "Oh, I still have gaps there, I couldn't really justify the answer". This was once again a very special motivation for studying for the exam. Overall: Everyone was awake, with enthusiasm and ambition in the sessions with Spiel.“
Alina Tausch,
Witten/Herdecke University

“I found What The Hack! entertaining and immediately noticed that it made me more attentive. Cybersecurity no longer felt like a dry mandatory exercise, but like real teamwork. Absolutely recommended!”
Florian S.
Field CTO EMEA in the Tech Industry
"I joined the What The Hack! Tournament expecting an interesting security challenge, but it turned out to be even more fun than I anticipated. The combination of teamwork, creative thinking, and friendly competition made for a great experience. A big thank you to everyone involved for the excellent collaboration. Our hacker opponents certainly had a tough day"
Maryam J.,
Security Engineer in the Public Sector
"The NIS2 training was really fun thanks to the moderators and the participants. The special thing: It was not primarily about cyber security knowledge, but about people from different areas thinking through scenarios together and learning from each other. It was really fun!"
Reza A.,
Management
“Admittedly, I was initially skeptical when I was spontaneously invited to play What The Hack! at the NIS2 Congress in Frankfurt. But the playful approach to examining security incidents and risk assessments from new perspectives—and discussing those perspectives with other participants—was surprisingly insightful and inspiring.”
Andreas M,
Managing Consultant
"What the Hack! manages to convey an important and complex topic such as IT security in a playful and at the same time very practical way. The students are highly motivated, discuss with each other and often want to continue playing directly, because each round opens up new situations, strategies and perspectives. It is particularly valuable to me that the game has an effect beyond the classroom: the learners question their own behavior and deal more consciously with risks and dangers in the digital world.“
Moritz Ringhoff,
Lübbecke Vocational College.
"The children in my primary school class found WTH very motivating, as the playful aspect and the competitive nature inspired everyone to defeat the hacker. Because the class works together as a team and has to reach an agreement whenever there are differences, it gets all the children talking with one another about the current question. As a result, children explain things to other children, which is often more rewarding than when adults do it. Weaker students are supported by their team members so that everyone can participate in the game. For questions that the entire class answered incorrectly, it's great that What the Hack! provides the students with a child-friendly explanation, allowing everyone to benefit from wrong answers and learn new things as well."
Phyllis Wiechert,
Bünningstedt Primary School.
"More fun: The students were thrilled that their knowledge is not only asked in an exam, but is part of an immersive experience. In addition, developing a campaign yourself is exactly the practical application of the learning material that you would like. Positive change: Playing the game clearly showed "Oh, I still have gaps there, I couldn't really justify the answer". This was once again a very special motivation for studying for the exam. Overall: Everyone was awake, with enthusiasm and ambition in the sessions with Spiel.“
Alina Tausch,
Witten/Herdecke University

“I found What The Hack! entertaining and immediately noticed that it made me more attentive. Cybersecurity no longer felt like a dry mandatory exercise, but like real teamwork. Absolutely recommended!”
Florian S.
Field CTO EMEA in the Tech Industry
"I joined the What The Hack! Tournament expecting an interesting security challenge, but it turned out to be even more fun than I anticipated. The combination of teamwork, creative thinking, and friendly competition made for a great experience. A big thank you to everyone involved for the excellent collaboration. Our hacker opponents certainly had a tough day"
Maryam J.,
Security Engineer in the Public Sector
"The NIS2 training was really fun thanks to the moderators and the participants. The special thing: It was not primarily about cyber security knowledge, but about people from different areas thinking through scenarios together and learning from each other. It was really fun!"
Reza A.,
Management
“Admittedly, I was initially skeptical when I was spontaneously invited to play What The Hack! at the NIS2 Congress in Frankfurt. But the playful approach to examining security incidents and risk assessments from new perspectives—and discussing those perspectives with other participants—was surprisingly insightful and inspiring.”
Andreas M,
Managing Consultant
"What the Hack! manages to convey an important and complex topic such as IT security in a playful and at the same time very practical way. The students are highly motivated, discuss with each other and often want to continue playing directly, because each round opens up new situations, strategies and perspectives. It is particularly valuable to me that the game has an effect beyond the classroom: the learners question their own behavior and deal more consciously with risks and dangers in the digital world.“
Moritz Ringhoff,
Lübbecke Vocational College.
"The children in my primary school class found WTH very motivating, as the playful aspect and the competitive nature inspired everyone to defeat the hacker. Because the class works together as a team and has to reach an agreement whenever there are differences, it gets all the children talking with one another about the current question. As a result, children explain things to other children, which is often more rewarding than when adults do it. Weaker students are supported by their team members so that everyone can participate in the game. For questions that the entire class answered incorrectly, it's great that What the Hack! provides the students with a child-friendly explanation, allowing everyone to benefit from wrong answers and learn new things as well."
Phyllis Wiechert,
Bünningstedt Primary School.
"More fun: The students were thrilled that their knowledge is not only asked in an exam, but is part of an immersive experience. In addition, developing a campaign yourself is exactly the practical application of the learning material that you would like. Positive change: Playing the game clearly showed "Oh, I still have gaps there, I couldn't really justify the answer". This was once again a very special motivation for studying for the exam. Overall: Everyone was awake, with enthusiasm and ambition in the sessions with Spiel.“
Alina Tausch,
Witten/Herdecke University

Whitepaper

Serious Business Gaming in Corporate Security

Learn how serious business gaming turns security awareness into an interactive and engaging experience — and why it’s more effective than traditional training formats.

Download Whitepaper

Whitepaper on Serious Business Gaming in corporate security with insights into the awareness game

Frequently Asked Questions

Everything you need to know about the product

Can you play What The Hack! multiple times?

Yes. What The Hack! can be used repeatedly in awareness training. Different campaigns, in-game decisions, and team discussions open up new perspectives. Even familiar situations can be discussed again and decisions can be reflected upon.

Can you play What The Hack! multiple times?

What makes What The Hack! different from traditional training?

Instead of just passively absorbing content, participants in What The Hack! make decisions in simulated cybersecurity situations. In a team format, individual assessments are combined with discussions and a joint team decision under playful time pressure. This brings security issues and the strategic use of resources to life.

What makes What The Hack! different from traditional training?

Are all data protection requirements met?

Privacy-compliant use depends on the chosen application and specific configuration—particularly on what personal data is processed, who can access it, and how long it is stored. Before deployment, please consult with us and your data protection officers to clarify the necessary documentation and requirements, such as data processing agreements, technical and organizational measures, and retention schedules. We do not provide a blanket guarantee of compliance with all data protection requirements.

Are all data protection requirements met?

To what extent can the game be customized?

The game is highly customizable for corporate use: Branding & Design: Companies can change the appearance and user interface (background colors, icons, logos, fonts). Content & Scenarios: Organizations can add company-specific content for cybersecurity and define focuses for awareness campaigns. Game Settings: Administrators can adjust difficulty levels, duration, and reporting dashboards to achieve training goals.

To what extent can the game be customized?

How long does a round of the game last?

The recommended game duration is 30 minutes, but it can be adjusted. The game ends when the hacker is caught (won), the hacker causes greater damage, or time runs out (lost).

How long does a round of the game last?

The recommended game duration is 30 minutes, but it can be adjusted. The game ends when the hacker is caught (won), the hacker causes greater damage, or time runs out (lost).

Can the game replace mandatory security training?

What The Hack! can be integrated as one component of a training and awareness program. Whether it can replace a specific mandatory course depends on the prescribed content, target groups, evidence requirements, and your organization’s obligations. This should be reviewed in advance with the responsible specialists; no blanket replacement is guaranteed.

Can the game replace mandatory security training?

How does the game contribute to the promotion of a cybersecurity culture?

Engaging learning experience: Participants actively consider security-related situations instead of only consuming training material. Realistic decision-making: Simulated scenarios allow teams to discuss risks and possible responses in a controlled setting. Teamwork and reflection: The team format encourages participants to compare perspectives and reach a shared decision. Continuous awareness: Different campaigns and recurring sessions can support ongoing awareness activities.

How does the game contribute to the promotion of a cybersecurity culture?

Is What The Hack! certified as an awareness training format?

What The Hack! was audited by Assurance Cert International as a practical, target-group-oriented and verifiable awareness and training format. The assessment criteria include the German BSI Act (BSIG), DORA and ISO 27001, among others. The audit confirms the methodological and content framework for supporting relevant awareness and training initiatives. The certificate is valid until February 1, 2030.

View certificate ↗

The team behind the game

Marcus Schaper

Co-CEO and Chief Product Officer

SBG Serious Business Gaming GmbH

Florian Haacke

Co-Founder

SBG Serious Business Gaming GmbH

Dirk Peter Fleischer

Chief Learning Officer

SBG Serious Business Gaming GmbH

Sebastian Hanhues

Chief Technology Officer

SBG Serious Business Gaming GmbH

About us

Experience What The Hack! for yourself.

Are you interested in our awareness platform or planning a moderated team event? Experience What The Hack! in a demo or talk to us about your specific use case.

Team selection in the What The Hack! awareness game on a smartphone

Team-based Security Awareness Training with Gamification for IT Security, Data Protection & Compliance

Team-based Security Awareness Training with Gamification for IT Security, Data Protection & Compliance

Team-based Awareness Training with Gamification forIT Security, Data Protection & Compliance

Security Awareness Training as an intuitive Serious Business Game

Security Awareness Training as an intuitive Serious Business Game

Awareness Platform

Facilitated Team Awareness Events

How awareness training works with What The Hack!

How awareness training works with What The Hack!

How awareness training works with What The Hack!

Discuss a practical scenario as a team

Exchange perspectives and reach a shared decision

Correct answer? Earn tokens and stop the hacker!

Developed by CISOs and CSOs with practical experience

Cyber Awareness Events have suitable occasions all year round

Security Awareness for Cybersecurity, Data Protection, and Compliance

Gameplay

Discuss practical scenarios as a team and learn from one another

Defend against attacks

Catch the hacker!

User team wins!

Key features

For Teams & Individuals

High replay value

Digital or hybrid

Quick, intuitive start

Customizable

AI Features

Real scenarios

Highest quality content

What Our Customers Say

Serious Business Gaming in Corporate Security

Frequently Asked Questions

The team behind the game

Experience What The Hack! for yourself.

Team-based
Awareness Training with Gamification for
IT Security, Data Protection & Compliance

Security Awareness Training as an
intuitive Serious Business Game

Security Awareness Training as an
intuitive Serious Business Game

Cyber Awareness Events
have suitable occasions all year round