An example operation may include a method comprising one or more of sending, by a device, a notification message to a server, when a threat is determined on a device, developing a simulation to spread awareness of a situation in response to the sending, requesting, by the server, a permission to present the simulation to the device, sending, by the device, a response message in response to the requesting, and executing the simulation, by the server, when permission is granted on the device.