Skip to content
ControlDrill logo

ControlDrill

Runs facilitated incident response tabletop exercises against your own plan and systems, and produces a timestamped record of each decision.

Actively maintained

Developer toolsComplianceSecurity
controldrill.com ↗
Open controldrill.comAlternativesSet it up for my teamIs ControlDrill yours? Claim the card →
At a glanceswept Oct 22, 2026

not read yet

Use

For
Security leads, vCISOs and MSPs running incident response tabletops for SOC 2 or ISO 27001 audits.
Activity
Actively maintainedsite updated 4 days ago
Company
Sons, LLC · Domain since 2026privacy policy · domain registered
Used for
  • Test your incident response plan against a tailored scenario
  • Record who decided what, and when, as auditor evidence
  • Find response gaps before a real incident pages anyone
Worth knowingcomputed from what we read · each with its source
Pricing

Price not read

Trial & discounts

Your datawhat they publish, each line with its page · read Oct 24, 2026

“We do not use customer content to train models.”

privacy policy ↗

These are ControlDrill's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.

How a program reaches itfound, not claimed · read Oct 24, 2026
  • MCP servercom.controldrill/mcpverified in the MCP registry
  • Stateanswers, requires sign-inchecked 2026-10-24
  • Address to connectmcp.controldrill.com/mcp

MCP server details →

This card as JSON, for your agent →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Alternatives in Developer toolsby use, among tools still maintained

Figure and bar: visits/mo, estimate · year: online since

Compare ControlDrill with

Pick up to two.

All 10 alternatives to ControlDrill →

All Developer tools tools →

Not it? Say what you need

beta

Three tools from the Atlas for the job you describe, each with what fits and what does not.

From people who use itnot part of the reading

No notes yet. What do you use ControlDrill for?

Sign in to leave a note
Questions this page answers
  • What is ControlDrill?

    Runs facilitated incident response tabletop exercises against your own plan and systems, and produces a timestamped record of each decision. It is listed in the Atlas under Developer tools and made by Sons, LLC.

  • Who is ControlDrill for?

    Security leads, vCISOs and MSPs running incident response tabletops for SOC 2 or ISO 27001 audits.

  • Do people use ControlDrill?

    Little sign of use.

  • Is ControlDrill still maintained?

    Actively maintained: site updated 4 days ago.

  • Who owns ControlDrill?

    ControlDrill is run by Sons, LLC, per its privacy policy (2026-10-24).

  • Does ControlDrill train AI on your data?

    No, per its privacy policy (2026-10-24): “We do not use customer content to train models.”

  • Is ControlDrill safe?

    We do not audit vendors. What ControlDrill publishes, read 2026-10-24: on training with your data, “We do not use customer content to train models.”.

  • Does ControlDrill give refunds?

    In its own words (terms of service, 2026-10-24): “Fees are generally non-refundable once charged, except where required by law or where we agree in writing (for example a clear billing error on our side).”

  • What are alternatives to ControlDrill?

    In Developer tools, by use: GoRules, Mabl, Agentic Control Plane, Cognitiveview, Rippletide Eval CLI, SanityCheck.

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.

How we read every tool → · By INITE Atlas Desk