The Operation Blindspot Tour

Blindspots. Even the most secure environments have them.
And attackers know how to exploit them.

As seen on…

The Challenge

Step into the war room of a fictional rural Nevada water utility, where a quiet day quickly turns into a full-blown cyber crisis.

Do you saunter in, confident that your defenses are impenetrable? Or does your spider sense tell you that danger is imminent?

Gaps will be exposed. Assumptions will be shattered. Your response will determine the outcome.
This is Operation Blindspot.

Detect, defend, and respond before the system collapses.
Find every gap. Cause maximum chaos.

Why Attend?

This ain’t your first rodeo, but even skilled cowboys exercise their strength and agility. And before you get too excited (or anxious), we should probably be clear: This is a simulation. Nobody is truly hacking anyone, anything, or any place.

  • Expose critical blind spots in identity, operations, and infrastructure
  • See how attackers creatively bypass traditional defenses
  • Learn how defenders detect, contain, and recover under pressure
  • Join a room of public and private sector cyber leaders, including IT pros from government, law enforcement, and critical infrastructure
Request your seat
CSOonline

The simulation of the hypothetical attack against “Springfieldshire Water Treatment” consisted of four game phases…designed to allow participants to exercise incident response strategies.

Operation 999: Ransomware tabletop tests cyber execs’ response CSOonline
Infosecurity Magazine

60% of utility operators were targeted by cyberattacks within the past year, with 80% of those suffering multiple attacks.

Ransomware Drill to Spotlight Water Utility Cyber Risks in ‘Operation 999’ Infosecurity Magazine
Tech Informed

The tabletop is based on a real-life scenario that lasted around 30 days from the start of the event to the recovery.

Operation 911: Anatomy of an Attack (Part 1) Tech Informed

We’re trying to learn from each other and learn from law enforcement and work together. In healthcare, we’re seeing this happen over and over again, and we’re trying to learn how to better get ahead of it.

Marty Momdjian General Manager, Semperis Ready1
2025 Tour Stops

Infosec  ·  London, UK  ·  June 4  ✓
Black Hat  ·  Las Vegas, NV   ·  August 5  ✓
Hybrid Identity Protection (HIP) Conference  ·  Charleston, SC  ·  October 6 & 7
Govware  ·  Singapore  ·  October 21
MS Ignite  ·  San Francisco, CA  ·  November 19

Take the challenge
GovWare Edition

Date: Tuesday, October 21, 2025
Time: 2-4pm SGT
Location: Pan Pacific Singapore

Ignite Edition

Date: Wednesday, November 19, 2025
Time: 3-5pm PST
Location: American Bookbinders Museum, San Francisco, CA

Recovery for Azure AD

Crush your assumptions.

Request a seat for one of our tabletop exercises.

Operation Blindspot @ HIPConf25

Our next tour stop is Charleston. Only registrants of the Hybrid Identity Protection Conference can attend this tabletop, so get your tickets already! Let’s shape the future of identity security—together.

“Defending critical infrastructure against nation-state threats is one of the toughest challenges we face. Exercises like this are invaluable. They not only help defenders on the front lines preparing and preventing attacks but they also shed a positive light on so many unsung heroes defending their organizations from threat actors.”

Marcus Hutchins Aka MalwareTech, who stopped the 2017 WannaCry cyberattack

Hybrid Identity Protection (HIP) Conference 2025

Semperis’ annual Hybrid Identity Protection (HIP) Conference for identity-first security practitioners takes place on October 7-9, 2025, at Charleston Place in Charleston, South Carolina.