Prove Defensive Readiness Against Active Adversaries: Introducing Threat Actor Insights

Welcome back to Prove It, a series spotlighting the latest AI-forward capabilities, integrations, and platform innovations helping organizations build and demonstrate cyber resilience in the AI era. Each edition highlights what's new in Immersive One, why it matters, and how it helps leaders move from assumptions to evidence as AI transforms the way people work, defend, and lead their organization.

“Traditional threat intelligence reveals who is attacking. But it can’t prove your team can stop them.” 

Rebecca Schimmoeller, Lead Product Marketing Manager: Security leaders are flooded with threat intelligence detailing exactly who is targeting their sector. Yet they still struggle to answer when the board asks, “are we actually ready to defend against them?” Let’s pick up that thread, Amy: Why does traditional threat data leave managers guessing?

Amy Millard, Product Manager: Today's security stack is fragmented. Threat intelligence tools tell you who's coming after you, and your security platform gives you ways to patch the holes. But nothing connects the two. Threat feeds are built without any view into how your own team performs, so leaders don’t necessarily know which exercises to prioritize next. That leaves organizations blind to how they would actually hold up against the specific tactics targeting them. And that gap only widens as attackers use AI to move faster than defenders can keep pace.

Rebecca: So when a new adversary emerges, managers are stuck sorting through manual reports. They don’t have meaningful insight into what their own people know and how well they'd perform against that specific attack or threat actor. What’s the value in connecting threat intelligence directly to live performance data? 

Amy: For the security manager, it turns the job into a practice of proactive defense. Right now, they're reacting because they have no way to know how their team would actually perform until a real incident forces the question. That's a huge knowledge gap, and it leaves the business exposed. With Threat Actor Insights, Immersive One Advanced and Multi-Module customers no longer have that problem. They have access to a capability that directly connects threat intelligence to their team's live performance data.

Rebecca: So no more parsing another PDF advisory or taking best-guess next steps to shore up defenses?

Amy: Exactly. A security leader can see immediately whether their organization has the proven, hands-on capability to stop that adversary's exact tactics. Threat Actor Insights turns a vague list of risks into a clear roadmap of exactly which exercises to run next, before an attack happens.

Rebecca: That also gives a manager something solid to point to in their next leadership conversations. What can they actually show their executive team?

Amy: Hard evidence. A manager can now show exact readiness metrics, coverage, and depth across the MITRE ATT&CK framework, mapped to the threat actors actually targeting their industry. That matters beyond the security team too: it's the kind of evidence a CISO can bring to the board, or hand to a regulator or insurer asking difficult questions about defensive readiness. Most organizations don't have anything close to that today.

Rebecca: Instead of generic metrics or another manual threat advisory, Threat Actor Insights gives leaders objective proof of readiness. There’s no question how their organization's capability stacks up against the specific tactics adversaries are using right now.

Turn Raw Threat Intelligence into a Board-Ready Risk Map

With Immersive One's latest release, you can:

• See vulnerabilities as they emerge. Overlay active attacker tactics onto real-time performance data to pinpoint exactly where the risk sits.
• Expose single points of failure. Radar charts and scatterplots reveal where your organization is "skilled but thin", where one person's expertise can quietly hide gaps.
• Capture baseline data you can trust. Readiness scores evaluate your entire user base, ensuring a few statistical outliers don’t distort the metrics you pass up to leadership.
• Close gaps at the speed threats move. Leveraging AI Program Builder, you can deploy targeted exercises the moment a high-risk gap turns up, so upskilling never lags.

As AI reshapes how fast threats move, and how fast organizations need to respond, Immersive One delivers a controlled way to test whether people can perform under realistic pressure. Managers get actionable insight to benchmark and improve against, and report up the chain with confidence. 

What’s Next for Threat Actor Insights

Visualizing your current readiness is just the baseline. To help leaders scale these insights and effortlessly translate technical gaps into business risk, a series of Threat Actor Insights enhancements will roll out in quick succession:

• Automated actor-to-industry mapping: Instantly prioritize the specific threat groups actively targeting your sector.
• AI-powered executive summaries: Turn complex gap analyses into ready-made leadership updates
• Macro threat landscape views: Track your team's resilience against your top-monitored threat groups over time to prove continuous ROI.

As AI accelerates the speed of active adversaries, staying ahead means automating your insights. Immersive One ensures you can.

Get Started

If you are a new customer, book a demo today to see how your security team benchmarks against active real-world adversaries. 

For Immersive One customers, access to the new Threat Actor Insights capability will roll out based on your subscription tier:

• Immersive One Advanced customer? Log in to start mapping your team's live performance against active adversaries. Full, unrestricted access is included in your current subscription. 
• Multi-Modal customer? (Using three or more solutions, e.g. Immersive Labs plus any Technical Exercising solution and Crisis Sim) Log in to enjoy complimentary, preview access to Threat Actor Insights, July 8 - September 30, 2026. 
• Single-solution or other Immersive One customer? Look out for the in-platform notification when you log in; soon, those with “Organization Administrator” privileges will be able to launch a self-serve, 30-day trial of Threat Actor Insights directly inside the platform.

‍