An automated containment protocol has sealed the server bay. Stepping in as an on-duty SOC analyst, your mission is to triage incoming communications across three defense tiers: Email Gateway, SMS Relay, and Chat Terminal. Uncover deceptive domains, analyze urgency lures, and expose social engineering red flags to override all 3 blast doors and escape the breach.
Three channels. Clear each door to break the lockdown.
// 01 · incident briefing
You are a new Security Operations Center (SOC) analyst working the overnight shift when an automated containment lockdown seals the server bay. To override the blast doors and get out, you must inspect incoming messages and separate real communications from social engineering attacks across 3 security doors.
Sentinel is an interactive security awareness game by Judika Marpaung. You play a new SOC analyst locked inside a server room and must triage fictional emails, SMS, and chat messages to unlock three blast doors, learning to recognize phishing, disguised links, OTP requests, and other common online scams.
Sentinel Bot, a robot companion on the desktop title screen, follows your cursor, shares rotating security tips, and greets you when clicked.Spot obvious lottery giveaways, fake delivery APK installers, and urgent support impersonators demanding one-time passcodes.Analyze targeted subscription invoices, executive impersonation in chat, and disguised links hiding behind lookalike domains.Handle high-pressure recruitment and escrow traps alongside legitimate security alerts that look suspicious at first glance.// 02 · operator manual
Each door presents 6 messages in random order with a 120-second timer, 3 lives, and 1 hint.
Read the sender address or masked phone number, subject line, and message body across realistic Email, SMS, and Chat views.Press P for Phishing or S for Safe (+100 pts per right call). Press H once per door to reveal a red flag or safe signal.The timer pauses while you review highlighted red flags and security tips. Press Enter to continue or Esc to pause.// 03 · threat intelligence
Every phishing scenario in the escape room trains you to spot one or more of these 8 core red flag categories:
Lookalike or unverified domains crafted to impersonate trusted companies and capture logins.
Artificial deadlines and threats of account deletion designed to rush you into acting without checking.
Requests for one-time passcodes, passwords, national IDs, or bank account numbers over email or chat.
Unexpected executable or mobile installer files such as APK packages disguised as tracking tools.
Unsolicited sweepstakes or lottery winnings that ask for banking details to release a payout.
Deceptive URLs that place a known brand name in a subdomain while pointing to an untrusted host.
Generic support handles, unknown marketplace accounts, or private addresses posing as executives.
Awkward grammar, unusual phrasing, or instant job placements that skip normal interviews.
// 04 · emergency recovery protocol
Falling for a scam happens to everyday users and security pros alike. If you clicked a malicious link, sent a verification code, or entered financial details, take these immediate, region-neutral response steps:
Cut all communications with the scammer. Do not answer follow-up calls, emails, or chat messages, and do not attempt to negotiate.Reach out to your bank, courier, or platform through their official app, saved browser bookmark, or the customer service number on the back of your payment card.Update passwords immediately for compromised accounts and any other services sharing that password. Enable two-factor authentication, preferably using an authenticator app.Inspect bank statements, card charges, login sessions, and email forwarding rules. Request a temporary freeze on payment cards or credit files if unauthorized charges appear.Report the scam to the impersonated company fraud department and file an official report with your regional or national consumer protection / cybercrime agency.If your email, messaging profile, or address book was compromised, alert your contacts promptly so attackers cannot impersonate you to target your colleagues or loved ones.