Compare
ControlDrill vs ThreatGEN AutoTableTop
ThreatGEN AutoTableTop is an established AI tabletop product: generate an exercise from context, run it with a facilitator seat, and export after-action material. ControlDrill is built as the room itself: every participant joins, answers under a timer, and leaves with attributed evidence for compliance work without a control grade.
$199 flat. Self-serve. No sales call.
The honesty line
Other tools grade your controls. A grade from a discussion exercise is not something an auditor has to accept, so ControlDrill hands you attributed evidence of what your team actually did and leaves the verdict where it belongs. A tabletop is also not a live failover test, which is worth knowing before you buy either one.
Side by side
Claims about ThreatGEN AutoTableTop below track their public product marketing (reviewed 2026-07-28). Features and prices change; re-check https://threatgen.com/autotabletop before a procurement decision.
| ThreatGEN AutoTableTop | ControlDrill | |
|---|---|---|
| Buy motion | Contact sales / book a walkthrough (public product page) | $199 self-serve checkout |
| Who the software seats | Facilitator license; team follows on a shared screen | Every participant joins the live room with their own link |
| Evidence model | Transcripts and after-action analysis mapped to your plan | Attributed typed contributions + deterministic packet builder |
| Control grading | Scores responses against the IR plan (product marketing) | Never prints a control pass or coverage percentage |
| Data path for the plan | Self-hosted / local cache story on their marketing site | Cloudflare Workers AI + R2; plan not sent to an outside AI vendor |
| Compliance posture in copy | Readiness and after-action reporting | Evidence of the exercise only; no certification claim |
What ThreatGEN AutoTableTop markets
- AI-generated scenarios, injects, and decision points from natural-language context
- Facilitator-oriented run model (one licensed seat; project or share to the rest of the team)
- Strong data-locality story (self-hosted / exercise data not kept on their servers, per their site)
- Can grade team responses against an uploaded IR plan
- Public pricing is contact-sales / walkthrough, not a fixed self-serve exercise price on the product page
What ControlDrill ships
- Multi-party session: each participant has a personal pane and authenticated identity
- Server-side inject clock and silence escalation; the AI moderator drives the room
- Plan and tailoring stay on Cloudflare Workers AI (no external LLM subprocessor for the plan)
- Evidence packet with decisions and gaps; we deliberately do not grade controls as tested or passed
- $199 flat. Self-serve. No sales call
Who should pick which
ThreatGEN is a strong fit if you want unlimited generated scenarios under a facilitator license and a self-host data model. ControlDrill is the fit when the buyer needs a fixed-price multi-party run this cycle and an auditor-facing packet that refuses to fake a grade.