Getting Started with Zamlom
Your complete guide to deploying interactive incident command tabletop drills, tracking organizational readiness, and mastering domain skills.
Two Registers, One Operational Engine
Zamlom is built around a dual-register architecture engineered for both enterprise leadership and hands-on practitioners.
| Register | Primary Audience | Core Functionality | Key Artifacts Produced |
|---|---|---|---|
| Executive / Auditor Register | CISOs, Board Members, Security Auditors, Underwriters | Clinical incident command tabletop drills, team readiness scoring, gap analysis | Auditor-ready After-Action Reports (AAR PDF), IR Readiness Scores |
| Practitioner / Study Register | SOC Analysts, GRC Specialists, Security Engineers | Domain node maps, flashcard drills, 1-click tabletop remediation decks | Mastery Badges, Daily Target Streaks, XP Acceleration |
Team Manager Quick-Start Guide
Activate Your Team Workspace
Click your organization's invite link, or create a new team yourself from the Identity tab. Either way you'll land in the Team Dashboard with your org's join code, ready to invite the rest of your team.
Host Tabletop Drills
Navigate to Assessments → Tabletop Exercises. Launch solo simulations or real-time multiplayer drills tailored for SOC, GRC, and Executive leadership.
Export Executive AARs
Upon scenario completion, review real-time decision velocity, containment deltas, and export board-ready After-Action Reports (AAR PDF) with 1 click.
Deploy Remediation Decks
Automatically assign targeted Remediation Decks to team members directly from tabletop findings, so identified skill gaps turn straight into a study plan.
Practitioner Quick-Start Guide
Select Domain Track
Choose from 4 specialized towers: SOC (SIEM, CTI, Malware), GRC (Risk, Audit, TPRM), Executive (Security Management, Strategy), or Architecture.
Execute Daily Target Sprints
Set your daily learning target (3, 5, or 10 nodes/day). Maintain your daily target streak ring to earn the +50 XP Daily Goal Bonus.
Master Domain Checkpoints
Test your knowledge across comprehensive Domain Checkpoints featuring scenario questions, audit challenge line inspections, and technical drills.
Spaced Repetition Review
Leverage integrated Leitner-box flashcards to reinforce retention across high-impact role competencies and operational frameworks.
How the Platform Mechanics Work
Zamlom isn't just quizzes with a coat of paint - every mechanic below is real, and the numbers are exactly what the platform actually pays out.
Recommended First-Timer Study Path
Set Up & Start Your First Domain
Visit the Identity tab to set your name and daily target, then head to Curriculum, pick a starting track, and open Domain 1 of a course. Read each node's card, then answer its quiz - Low wagers are the safe default while you're finding your footing.
Clear Your First Domain Checkpoint
Once every node in the domain is done, take the checkpoint. It's pass/fail on a perfect run, so take your time - a domain badge and XP are on the line.
Explore Study Hub & Daily Missions
Try the Distinction Lab for concepts people commonly mix up on the job (and on exams), and knock out your two Daily Missions to build your streak.
Run a Tabletop Exercise
Head to Assessment Center → Tabletop Exercises, launch a solo scenario, and watch your decisions become a real After-Action Report at the end - including a Remediation Deck built from wherever the exercise found your gaps.
Installing Zamlom on Your Device
Zamlom is a Progressive Web App - no app store required, and it works a little differently depending on what you're using.
Complete Feature Catalog
Every tool on the platform, including a few you might not stumble into on your own.
Curriculum & Journey
- 4 tracks: security leadership, architecture & engineering, governance/risk/compliance, and security operations.
- 25 courses, 1,683 lesson nodes, each with a concept card and a wagered quiz.
- Domain Checkpoints at the end of every domain, sometimes pulling in an Audit Challenge question.
- Review Due (SM-2 spaced repetition) and Review Weak Concepts surfaced directly on the Curriculum home screen.
- Cross-course search right from the Curriculum tab to jump straight to any specific lesson.
- Suggested for you - a course recommendation on the Curriculum home screen, based on the track you've been making the most progress in.
Study Hub
- Flashcards with a "Needs Review" toggle and a "My Terms" saved-glossary mode.
- Matching Pairs - click a term, click its definition, connect them.
- Study Notes - a real-time, cross-course-searchable repository of every lesson's content.
- Glossary - 430+ terms, searchable, plus inline hover-tooltip definitions everywhere else in the app.
- Distinction Lab - 125 "X vs. Y" concept pairs people commonly confuse, each with a side-by-side breakdown and a one-click practice drill.
- Performance - a dashboard of your mastery across every course.
Assessment Center
- Timed Exam - a full-length mock exam under a countdown timer.
- Adaptive Assessment - a computer-adaptive test that recalibrates difficulty to your ability as you answer.
- Network Simulator - hands-on segmentation and firewall topology challenges.
- Audit Challenges - 25 realistic log/config excerpts where you click the exact line that shows the problem.
Tabletop Incident Command
- 5-act scenarios, playable Solo or with up to 4 people in Multiplayer, each in a different role (Executive, SOC, GRC, Architecture) over a live shared room.
- Invite teammates to a specific room - separate from a general team invite, this sends a push notification straight to that person for that one live session, with a Resend option if they miss it.
- Observer seat - watch all 4 roles' prompts and decisions in real time without taking a seat, join a room already in progress.
- Boardroom Crisis Mode - a single-track, full-screen presentation mode built to run live in front of an actual leadership team.
- After-Action Reports for every run - executive summary, MITRE ATT&CK phase alignment, a visual Decision Path, a full timeline, an improvement plan that turns straight into a personal Remediation Deck, and a printable PDF export.
Identity & Badges
- Verified Skill Badges - printable certificates for any course completed at 90%+ accuracy, with a public verification link and one-click LinkedIn sharing.
- Career Readiness Diagnostic - a 12-question snapshot (3 questions from each of the 4 tracks) that scores your readiness per track, available from the Identity tab.
- Daily Goal rings and a 120-day calendar of your study consistency, with encouragement if your streak breaks and extra recognition at 7/14/30-day milestones.
- Push notifications for tabletop invites - see the FAQ below for how to turn them on (and the iOS install requirement).
- Two-factor authentication (MFA) - authenticator-app based, enrolled with a QR code from the Identity tab.
- Account settings - email/password changes, account deletion, and a Reset Game Memory option that wipes local progress if you want a clean slate.
- What's New - a running log of what's shipped, and in-app feedback submission.
Team & Org Management
- Start or join a team - any solo account can create a new team or join an existing one by join code, right from the Identity tab - you don't need to wait for an invite link. If your work email domain already matches an existing org, you'll be offered to join it automatically the first time you sign up.
- Invite Teammate - invite by email with a role choice (Member or Team Manager), or just share your org's join code directly.
- Pending Invites - see outstanding invites and revoke one before it's accepted.
- Regenerate Join Code - issue a new join code for your org at any time; the old one stops working immediately (this is how you "change the ID" of your team).
- Promote/demote Team Manager, remove a member - manage roles for anyone in your org from the Roster.
- Roster by Tower - assign each member to a specific tower/team so readiness and reporting can be broken out by group.
- Set/Edit Industry & Size - tell us your org's industry and headcount to unlock peer readiness benchmarking (this is "edit industry").
- Set/Edit Report Logo - upload your org's logo so it appears on exported readiness reports.
- Training Campaigns - create, edit, and archive campaigns that assign a course to your team, with completion tracking; launch one straight from a skill-gap alert.
- Assign Course - point one specific team member at a course from any tower, separate from a whole-team Campaign. They see it as a banner on their Curriculum home screen (plus an instant notice if they're already in the app), and you can revoke it from the Roster at any time.
- IR Role-Readiness matrix - a live breakdown of how ready your org is across incident-response roles.
- Skill Gap banner - surfaces your org's weakest areas with a one-click "Launch Campaign" to address them.
- Live Activity stream - a real-time feed of team actions (joins, completions, role changes) pulled from the audit log.
- Export ▾ - download your full roster as CSV or PDF.
- Readiness Report - a separate, composite auditor-ready PDF covering your org's overall readiness (not the same as the roster export).
Platform-Wide Power Tools
- Command Palette (Ctrl/Cmd+K) - instant search across every tab, course, lesson, and glossary term.
- Keyboard shortcuts - 1-4 or A-D to pick an answer, Enter to submit/advance, Space to flip a flashcard, arrow keys to navigate, Esc to close any modal.
- Deep links and browser back/forward that actually work across the app.
- Cross-device cloud sync and full installability as a Progressive Web App.
Frequently Asked Questions
How are After-Action Reports (AAR) generated?
AAR reports are automatically compiled upon the conclusion of every tabletop scenario, with a full decision timeline and a MITRE ATT&CK phase timeline, without requiring manual transcription.
Can team members access the platform on mobile devices?
Yes. Zamlom features a responsive top HUD, adaptive card layout, and touch-optimized daily target rings designed for smartphones and tablets - and it installs as a real app on your phone. See Installing Zamlom above.
How do I turn on notifications for tabletop invites?
From the Identity tab, under Account Settings, click Enable Notifications and allow the browser permission prompt. On iPhone/iPad specifically, Zamlom has to be installed to your home screen first (see Installing Zamlom) before notifications work at all - an Apple restriction on Safari tabs, not a Zamlom limitation.
How do I turn on two-factor authentication (MFA)?
From the Identity tab, under Account Settings, click Enable MFA. Scan the QR code with any authenticator app (Google Authenticator, Authy, 1Password, etc.), enter the 6-digit code it gives you, and you're enrolled.
How does team seat quota administration work?
Team Managers can monitor active seat usage, invite members via join code or direct activation link, and change member roles in the Team Dashboard.