SEC//SIM - Security Engineer Simulation is a single-player strategy RPG simulation game that places players in the role of a security operations center analyst during a late-night shift. The experience centers on detecting and responding to cyber threats through log analysis rather than offensive hacking, blending roguelite elements with realistic blue-team tactics drawn from real-world SOC practices.
Gameplay
The core loop revolves around three core actions during each shift: hunting for suspicious entries in a scrolling log, deducing the nature of an attack through focused analysis, and containing the threat with targeted responses. Players flag anomalies by clicking lines or using grep with regular expressions to filter the data stream. Focus mode slows time to allow deeper examination of metrics like inter-arrival variance, entry paths, and business impact, helping distinguish automated machine activity from human operators. Containment decisions range from precise blocks on specific addresses to broader network segments, with each choice affecting uptime, trust levels, and overall shift performance measured by MTTR, SLA uptime, and detection F1 scores.
The game features ten distinct attack types mapped to established frameworks, including reconnaissance scanning, credential stuffing, SQL injection, XSS, L7 DDoS, phishing, valid-account abuse with lateral movement, C2 beaconing, exfiltration, and ransomware. An adaptive adversary modifies its approach based on prior blocks, returning with obfuscation if signatures are used repeatedly or avoiding repeat visits when root causes are addressed. This creates a persistent learning curve where early successes influence later challenges, culminating in an APT campaign called Silent Intruder that layers distractions with a primary objective.
Game Modes
Four distinct modes provide varied ways to engage with the simulation. Campaign mode involves progressing night by night toward the APT objective, with opportunities to select different loadouts for each run. Endless mode presents continuous threats that compound over time, testing sustained performance under increasing pressure. Daily mode delivers a shared seed for all players, allowing direct comparison of handling efficiency on identical log floods. Lab mode offers an untimed environment for isolated study of individual techniques without scoring consequences.
Progression ties into an ATT&CK codex that records mastered techniques alongside personal response histories. Supporting systems include a skill tree, shop, and career ladder advancing from Intern through L1, L2, Responder, Hunter, Lead, and CISO ranks. Techniques that become routine can transition to automated handling via SOAR elements, keeping the interface focused on novel threats.
Progression and Systems
Mastery develops along a single continuous path accessible to both beginners and experienced players. Newcomers rely on suggested responses, while those familiar with log structures achieve faster, cleaner resolutions that improve scores and reduce time. The underlying simulation remains consistent across skill levels, with differences appearing only in efficiency metrics. Keyboard-only controls with full rebinding support the entire experience, and severity indicators use shapes alongside colors for accessibility, including a color-blind-safe pattern option. Focus mode slowdown adjusts via settings, and the game supports instant switching between English and Japanese interfaces.
Everything runs entirely offline with no accounts or connections required. No stamina systems, timers, loot boxes, gacha mechanics, or purchases exist, directing attention solely toward skill improvement through repeated shifts.
Is It Worth Playing?
SEC//SIM suits players interested in strategy and simulation genres who enjoy methodical problem-solving and roguelite progression without competitive multiplayer elements. Its design models authentic blue-team processes such as SIEM triage, IOC identification, kill-chain reconstruction, and containment decisions, making strong performance in the game align closely with practical analytical skills. The low entry barrier combined with high skill ceiling supports steady improvement for newcomers and veterans alike. As an unreleased title scheduled for Q4 2026, it currently lacks player reviews or post-launch updates, so prospective buyers should evaluate the described mechanics against their preference for focused, offline single-player experiences centered on log analysis and adaptive threats. Those drawn to realistic security operations themes without external monetization pressures will find the structure rewarding through repeated play and system mastery.
