You can memorize every security acronym on the exam sheet and still freeze the moment someone asks, "okay, so what actually stops a DDoS?" Security is not a vocabulary list. It is a set of matchups: an attacker makes a move, and you answer with the right control. The people who are good at it do not recall definitions, they recognize the pattern and reach for the counter.
So we built a game that trains exactly that reflex. It is called Blue Siege, and it is here.
What it is
Blue Siege is a cyber tower-defense game inside TechLexicon. Threats stream down the lanes toward your network core, and you defend it by placing security controls. The twist that makes it teach: every enemy is a real threat, and every tower is a real defense. Place the wrong control and the attack slips through. Place the right one and you watch it work.
The matchups you actually learn
By the time you have cleared a few waves, these pairings are muscle memory, not flashcards:
- Port Scan, met with a Firewall. A port scan is an attacker rattling your doors to see which are open. A firewall decides which ports are open in the first place, so it is the natural counter.
- SQL Injection and XSS, met with a WAF. These attacks ride in through your web app. A Web Application Firewall inspects and filters malicious web requests before they reach it.
- DDoS, met with a CDN. A flood of traffic trying to drown your service gets absorbed and spread across a Content Delivery Network instead of hammering one server.
- Stealthy, hidden activity, met with an IDS. An Intrusion Detection System watches your traffic and alerts you when something is wrong. It detects, it does not block, and the game teaches that distinction.
Real security, not game-convenient fiction
It would be easy to make the mechanics fun by making them wrong. We did the opposite. The threat-to-control mappings reflect how security teams actually defend: defense in depth, layered controls, and active response. Some threats, like an APT (an advanced, persistent attacker), cannot be beaten by stacking more towers. You have to CONTAIN them, an active-response move, the same lesson real incident responders live by. Fun realism, never fake realism.
Why learning by doing beats memorizing
Reading that "a WAF filters malicious web traffic" is one thing. Deciding, in the moment, that the SQL injection sliding down lane two needs a WAF and not a firewall is another. Blue Siege puts you in that decision over and over, under a little pressure, which is exactly the condition an interview or an incident recreates. The knowledge sticks because you earned it by using it.
Why this matters for your career
Cybersecurity is one of the fastest-growing corners of tech, and threat-to-control questions are a staple of security and IT interviews. Being able to say "DDoS, so I would put a CDN in front of it" without hesitating is the difference between reciting a definition and thinking like a defender.
Key takeaway: Security is a matchup, attacker move against defender counter. Blue Siege turns those matchups into reps you play, so the right control becomes the one you reach for without thinking.
Play it
Blue Siege is free to play inside TechLexicon. Start in your browser at app.techlexicon.app, or get the full experience in the TechLexicon app on iOS and Android. Waves one through ten are free, so you can learn the core matchups without spending anything.
Stop memorizing threats. Go defend against them.