Protego field desk
PROTEGO
ALL GAMES
NEW MISSION / ACCESS CONTROL

PERMISSION PULSE

Keep the network alive. Give everyone only the access they need.

+ ACCESS GRANTEDSCOPE REDUCED
BLOCKUnsafe or no valid need
TRIMReal need, too much access
PASSApproved and just enough
2–5 MINUTES15 REQUESTS · 5 SECTORSBEST 0

Tap with one thumb · Swipe left to block, right to pass · Keyboard A / S / D

POWERED BY LEAST PRIVILEGEPROTEGO SECURITY LAB

About Permission Pulse

Access requests fly in against the clock. PASS the safe ones, TRIM the oversized ones, BLOCK the dangerous ones. A mobile-first arcade game about least privilege and cloud IAM, with a daily challenge.

Difficulty: BeginnerTime: ~4 min

How it works

  • Fifteen access requests arrive one at a time across five sectors. For each one you choose PASS, TRIM, or BLOCK before the timer runs out. The window shrinks from 18 seconds to 10 as you advance.
  • A correct call scores 100 points plus a bonus for time left and for your streak. A wrong call or a timeout costs one of five integrity shields, and every fourth correct call in a row restores one.
  • Lose all five shields and the network is breached, ending the run early. After every call the game shows the correct move and a short lesson.
  • Arcade runs draw a random deck. The daily challenge uses the same deck for everyone on a given UTC date, and your best scores are saved in your browser.

What you'll learn

  • Least privilege in practice: match the action, the resource, and the duration to the stated task, and nothing more.
  • When to trim instead of deny: real work that asks for too much, such as s3:* on every bucket when only s3:PutObject on one prefix is needed.
  • Red flags that call for a block: unverified requesters, urgency without approval, disabling MFA or audit logs, and secrets for untrusted pull request code.
  • Cloud IAM ideas such as scoping kms:Decrypt to one key, prefix conditions on storage deletes, just-in-time admin roles, and reviewing OAuth consent for apps.

FAQ

Is Permission Pulse free and do I need an account?

Yes, it is free and needs no account. It runs in your browser, plays with one thumb on phones, and supports the A, S, and D keys on desktop.

What is the difference between TRIM and BLOCK?

TRIM means the requester has a real, approved need but asked for too much access or time. BLOCK means there is no valid need, the requester is unverified, or the request is unsafe.

Who is it for?

Developers, cloud engineers, and IT admins who grant access, plus anyone studying identity and access topics for Security+, SC-300, or AWS security exams.

Keep going