Threat Pilot

Your interceptor always flies forward. Hold Right/D to rotate clockwise continuously through full circles, or Left/A to rotate counterclockwise continuously. Release the key to keep the current heading. The pulled-back combat camera provides room to read incoming threats, turn onto targets, and maneuver between attack passes. Shots follow the exact live nose angle, so controlled tracking matters more than simply holding the fire key.

Wave 1 — Botnet Perimeter: no hostile projectiles. Bot Interceptors are small saucer craft making finite attack passes; gold formations award a bonus if you clear the whole group, and green Signal Beacons are optional pickups.

Wave 2 — Phishing Corridor: introduces a distinct purple crescent-style Phishing Drone. It approaches on a finite pass, shows an amber warning ring before firing one visible phishing packet, then breaks away. Enemy pressure remains capped at three so the new mechanic adds timing rather than a swarm.

Wave 3 — Exploit Run: introduces the larger orange Exploit Bomber carrier. It makes a slower crossing run, visibly telegraphs one payload drop, leaves a temporary red exploit zone in world space, then breaks away. Bombers and Command Nodes show damage by shedding external modules and debris rather than relying on a plain health bar.

Wave 4 — Ransomware Crossfire: introduces the crimson Ransomware Hunter. It tracks your projected flight path briefly, commits to a crossing line ahead of you, then finishes a finite pass and exits. Hunters take two hits, visibly shed a pincer/wing section after the first hit, and never remain as permanent homing enemies.

Wave 5 — Endpoint Siege: keeps all four established threat families but introduces the optional EDR Shield pickup. Fly through the cyan shield token to arm one defensive charge. The next collision, hostile projectile, or armed exploit payload hit is absorbed without reducing integrity; the shield is then consumed. Multiple shield opportunities appear during the wave, and missed pickups never block progression.

Wave 6 — Threat Intel Sweep: introduces the optional gold Threat Intel Burst. Capturing it highlights hostile craft and makes off-screen threat indicators more prominent for seven seconds. During that same window, combat and objective scoring is doubled. The burst is temporary, refreshes rather than stacks, and never gates progression.

Wave 7 — Firewall Vector: introduces the optional blue Firewall Spread pickup. Capturing it gives six seconds of three-lane fire centered on the exact live nose angle. The base 0.10-second firing cadence does not increase; the temporary effect widens coverage rather than turning the hero into a faster-firing hose. Shield, Threat Intel, and Firewall Spread may coexist, while missed pickups never block progression.

Wave 8 — Packet Purge: introduces the optional lime Packet Scrubber. Capturing it instantly clears hostile phishing packets and already-armed exploit payloads within a limited 255-unit radius around the hero. It never damages enemies and does not clear threats outside that local ring, so timing and positioning matter. Missed Scrubbers never block progression.

Wave 9 — Coordinated Breach: introduces synchronized breach pairs. At three milestones, the field clears before two different established threat types enter from widely separated vectors. Both craft carry a pale synchronization bracket. Destroy both before either escapes to earn a Vector Break bonus; if either escapes or collides, the pair simply fails and normal progression continues.

Wave 10 — Command Nexus: combines the established threat families, power-ups, and synchronized breaches, then ends with the larger Command Nexus. Its repeated passes cycle through a clean crossing run, a visibly telegraphed three-packet salvo, and a visibly telegraphed payload drop. The Nexus still sheds external modules and debris as it is damaged, so the final fight is readable without depending on a health bar.