Security training you play.

Your games account

One rank, eight rungs, three sources

Eight rungs, from Curious to Architect / Guardian. Three sources feed them — PCT, Career Roadster and Career AeroJet-Sense — and XP earned in any one of the three counts everywhere. Ciber Traversal is outside this ladder on purpose: the flagship runs its own operative ranks, inside the game, on its own curve. Everything below is read from the progress already stored on this device; nothing is sent anywhere to calculate it.

1. 1Curious0 XP
2. 2Newbie150 XP
3. 3Apprentice250 XP
4. 4Technician500 XP
5. 5Analyst900 XP
6. 6Responder1 500 XP
7. 7Consultant3 600 XP
8. 8Architect / Guardian7 300 XP

Where your XP came from

• PCT · Phantom Tracenot played yet
• Career Roadsternot played yet
• Career AeroJet-Sensenot played yet

This ladder totals the three sources above and nothing else. Ciber Traversal is not counted here — the flagship runs its own operative ranks and levels, on its own curve, inside the game. Folding two progressions into one would make both meaningless: you could out-rank this ladder without ever opening the other three.

Public standards, cited by name

These are the frameworks the missions are written against. We reference them; we do not reproduce their logos and we are not affiliated with any of them.

• MITRE ATT&CK®

  Mission techniques carry ATT&CK technique ids (T1059, T1040 and so on), so what you learn here uses the same names as a real detection rule. Ciber Traversal's mission data cites ATT&CK v18.

  attack.mitre.org ↗
• OWASP®

  The web-security missions follow the OWASP Top 10 categories — injection, broken access control, insecure design — rather than an invented taxonomy.

  owasp.org ↗
• NIST CSF 2.0

  The defensive framing follows the six Cybersecurity Framework functions: Govern, Identify, Protect, Detect, Respond, Recover. Career's districts map onto them.

  nist.gov/cyberframework ↗
• CISA KEV

  Ciber Traversal's live vulnerability ticker reads CISA's Known Exploited Vulnerabilities catalogue and the NVD. If the network is unavailable it falls back to a bundled snapshot and says so.

  cisa.gov/kev ↗

ATT&CK® is a registered trademark of The MITRE Corporation. OWASP® is a registered trademark of the OWASP Foundation, Inc. NIST and CISA are agencies of the United States government. Wordmarks above are set in this site's own typefaces; no logo is reproduced. Referencing a standard does not imply affiliation with, sponsorship by, or endorsement from its owner.

How this works

Everything the old “Game Guide” link promised — modes, commands, XP and how saves work — lives here, on the page you are already on. There is no separate guide to go missing.

• What you need

  A browser. Nothing to install, no account required, no payment, ever. Ciber Traversal and PCT are single self-contained pages; Career Roadster and Career AeroJet-Sense stream a small 3D world.

  No graphics card? Both Career games detect it and open a 2D map instead, carrying every mission and all of its teaching content. That mode is a first-class path, not a consolation prize.

• Controls

  • Career Roadster and Career AeroJet-Sense — W/S throttle, A/D or arrows steer, E to enter a district or a site, P to pause. In the Roadster, Space is boost and Shift is the handbrake; in AeroJet-Sense the two are reversed — Space/Shift are climb and dive, and Left Shift boosts. A gamepad works, and every binding is remappable from the pause menu.
  • Ciber Traversal — a terminal. Type help for the command list; the in-page How to Play button covers modes and scoring.
  • PCT — mouse or keyboard; each of the thirteen dossiers opens with its own rules panel.

• XP and rank

  • Career Roadster — one reward per district completed, rising from 40 XP at the help desk to 140 XP at detection engineering: 990 XP for the whole road.
  • Career AeroJet-Sense — 50 XP per call-out completed across five sites, plus credit for the flight itself, the investigation and for not acting when nothing warranted it.
  • PCT — XP per solved dossier, plus daily-slate and cross-game goals.
  • Ciber Traversal — XP per mission, per zone cleared and per achievement, banked to its own operative level and not added to the ladder above.

  The ladder above adds the first three together. Eight rungs, from Curious to Architect / Guardian.

• Where your saves live

  In this browser's local storage on this device, under the ncg:games: prefix. There is no server copy, no cookie, no analytics on your play, and nothing is sent anywhere.

  That means: a different browser or device is a different save, and clearing site data clears it. Use Your data below to take a copy out or move it.

• Install it, and part of it works offline

  This hub can be installed as an app. Once it is, the hub opens with no connection, and Ciber Traversal — whose missions ship with the page — plays offline after your first visit. The other three games load their mission packs fresh each time, on purpose, so a corrected pack reaches every player; they need a connection. Nothing is downloaded in advance, and nothing changes about where your saves live. Your browser decides when installing is on offer; the button appears only then.

• Accessibility

  • Full keyboard play throughout; controls are remappable and the binding is remembered.
  • Reduce motion locks the camera in the 3D games and removes the page transitions here — set it in the header, or leave it and it follows your operating system. The header button now governs this page as well as the games; until this pass it only wrote the preference and this page kept moving.
  • Larger text in the header applies to the games too, not just this page.
  • Objective colours use the Okabe–Ito colourblind-safe set, and every state also carries a shape and a written label, so colour is never the only signal.

• Accounts, honestly

  The account below is stored in this browser only. There is no server, no email is sent and nothing is tracked. It puts a name on your progress; it does not unlock anything, and every game is fully playable without it.

  When cloud sync ships, the same login carries over. Until then, treat it as a label, and use the export below if the save matters to you.

Your data

Everything all four experiences store is listed, exportable and — when you ask — provably deleted. A reset here re-reads storage afterwards to confirm; if anything survived, it says so instead of claiming success.

• What is stored

  Reading…

  Show the keys

• Take a copy

  A JSON file with every save. Import it on another browser, or keep it as a backup.

  Export save file

• Bring one back

  Restores an exported file. Keys outside this site's namespace are refused.

  Import save file

• Delete everything

  Clears every game save on this device, including the twelve PCT keys the old reset button missed. Your local account is separate — sign out or clear site data for that.

  Reset all progress

Why games?

• Nothing to phone home to — every game runs in your browser, and nothing about your play is sent to us. Ciber Traversal's missions are open teaching material, not a locked answer key: the terminal checks each step as you run it, so what you take away is the technique.
• Real techniques — ROP chains, SQL injection, vishing, supply-chain compromise — the same categories on the live threat landscape, not invented puzzles.
• Four audiences — from SOC analysts to seniors defending against scam calls, each mode meets its players where they are.

When the full build ships, the flagship gets its own origin — ct.neuralciberguard.org with the API at api.ct.neuralciberguard.org — so its session cookies and security policy never share an origin with this hub or the main site.