Compare
ControlDrill vs ThreatGEN AutoTableTop
ThreatGEN AutoTableTop is an established AI tabletop product: generate an exercise from context, run it with a facilitator seat, and export after-action material. ControlDrill is built as the room itself: every participant joins, answers under a timer, and leaves with attributed evidence for compliance work without a control grade.
$299 flat. Self-serve. No sales call.
The honesty line
Other tools grade your controls. We cannot grade your controls, and neither can they in a way your auditor must accept. ControlDrill gives you attributed evidence of what your team actually did and leaves the verdict to the auditor. We deliberately do not emit Tested, Partial, Untested, pass, fail, or a coverage percentage.
Side by side
Claims about ThreatGEN AutoTableTop below track their public product marketing (reviewed 2026-07-28). Features and prices change; re-check https://threatgen.com/autotabletop before a procurement decision.
| ThreatGEN AutoTableTop | ControlDrill | |
|---|---|---|
| Buy motion | Contact sales / book a walkthrough (public product page) | $299 self-serve checkout |
| Who the software seats | Facilitator license; team follows on a shared screen | Every participant joins the live room with their own link |
| Evidence model | Transcripts and after-action analysis mapped to your plan | Attributed typed contributions + deterministic packet builder |
| Control grading | Scores responses against the IR plan (product marketing) | Never prints a control pass or coverage percentage |
| Data path for the plan | Self-hosted / local cache story on their marketing site | Cloudflare Workers AI + R2; plan not sent to an outside AI vendor |
| Compliance posture in copy | Readiness and after-action reporting | Evidence of the exercise only; no certification claim |
What ThreatGEN AutoTableTop markets
- AI-generated scenarios, injects, and decision points from natural-language context
- Facilitator-oriented run model (one licensed seat; project or share to the rest of the team)
- Strong data-locality story (self-hosted / exercise data not kept on their servers, per their site)
- Can grade team responses against an uploaded IR plan
- Public pricing is contact-sales / walkthrough, not a fixed self-serve exercise price on the product page
What ControlDrill ships
- Multi-party session: each participant has a personal pane and authenticated identity
- Server-side inject clock and silence escalation; the AI moderator drives the room
- Plan and tailoring stay on Cloudflare Workers AI (no external LLM subprocessor for the plan)
- Evidence packet with decisions and gaps; we deliberately do not grade controls as tested or passed
- $299 flat. Self-serve. No sales call
Who should pick which
ThreatGEN is a strong fit if you want unlimited generated scenarios under a facilitator license and a self-host data model. ControlDrill is the fit when the buyer needs a fixed-price multi-party run this cycle and an auditor-facing packet that refuses to fake a grade.
What we never claim
- We do not certify compliance or guarantee an audit outcome.
- A tabletop does not replace a live failover or backup-restoration test.
- We do not print a control grade from a discussion exercise.