Security awareness
80% of attacks start with a person. We train your staff with realistic simulations and short lessons people actually finish.
- Simulated phishing
- Micro-learning
- Leadership and finance
- Evidence
- phishing clicks within six months
- −72%
- phishing clicks within six months
- per training module
- 8 min
- per training module
- content in three languages
- ES · EN · CA
- content in three languages
In detail
Your people are the front line. Train them like it.
Most breaches start with a person: a click on a link, a reused password or a call that seemed to come from the bank. One-hour annual courses don’t change that behaviour. Frequent practice does.
We combine realistic phishing simulations, tailored to your sector and the attacks we see this week, with three-minute micro-trainings delivered right when someone falls for it. No shaming: the goal is learning, not blame.
For leadership and finance teams we run dedicated sessions on CEO fraud, voice deepfakes and supplier impersonation, the attacks that cost the most money.
Real scenarios
The attacks we train for.
Altered supplier invoice
An email identical to a regular supplier’s with a new IBAN. We train finance to verify through another channel before paying.
Director voice deepfake
A call with the CEO’s cloned voice asking for an urgent transfer. We simulate it and set up verification code words.
QR code in the car park
A fake poster with a QR code leading to a Microsoft login page. We measure how many enter their credentials.
What you get
Measurable results, month by month.
- Training platform with your branding
- Monthly simulated phishing campaigns
- Dashboard with click and report rates by department
- Button to report suspicious emails
- On-site or remote workshops for leadership
- Training certificates for audits
How we engage
Plans by headcount.
Basic
Training and simulated phishing.
- Quarterly campaigns
- Course library
- Half-yearly report
- Most chosen
Professional
Continuous, measured programme.
- Monthly campaigns
- Vishing and smishing
- Department dashboard
Leadership
Protection for high-risk profiles.
- Tailored workshops
- Deepfake simulation
- Public exposure review
People
What is included
- 01
Simulated phishing
Campaigns tailored to your sector, language and real tools.
- 02
Micro-learning
Few-minute lessons right after each mistake.
- 03
Leadership and finance
Dedicated sessions on CEO fraud and voice deepfakes.
- 04
Evidence
Reports ready for NIS2, ISO 27001 and customer audits.
Security awareness
How we work
- 1
Baseline
A first campaign to measure the starting point.
- 2
Training
A plan by role and risk level.
- 3
Continuous simulation
Monthly campaigns that get progressively harder.
- 4
Measurement
A quarterly dashboard for leadership.
FAQ
Frequently asked questions
Do you name employees who fail?
No. Reports are aggregated by default; the goal is learning, not punishment.
Does it meet NIS2 training duties?
Yes, including the specific training NIS2 requires for management bodies.
Won’t it annoy employees?
We design it not to. Trainings are short and well-timed, and individual results are not used for discipline.
What click rate is normal?
At the start it is usually 20% to 30%. After six months, most clients drop below 5%.
Does it help with NIS2?
Yes. NIS2 requires training for management bodies and encourages regular staff training. We provide the evidence.
You may also need
Next step
Shall we talk about your case?
30 minutes with a partner, not a salesperson. No commitment.