Training library & assignments
Assign courses to the whole organization, a department, a group or named people. Deadlines, attempts and pass marks are enforced server-side.
Human risk management
Turn your people into the strongest control you own
Security awareness training, authorized phishing simulation and employee risk scoring in one multi-tenant platform — built for small and mid-sized organizations.
Free for the first 10 employees · No credit card required
- 3 min
- to first campaign
- 100%
- tenant isolation in DB
- 0
- credentials captured
- 5
- compliance frameworks
Everything the program actually needs
Not a dashboard mockup. Assignments, simulations, scores and logs are persisted records with tenant isolation enforced in the database.
Authorized phishing simulation
Unique cryptographic token per recipient, real click / submit / report tracking, and automatic remedial training. No credentials are ever captured.
Transparent risk scoring
Every employee score breaks down into completion, simulation behaviour, reporting and overdue training. No black box.
People & tenancy
CSV import with validation and column mapping, departments, groups and role-based access — all isolated per organization in the database itself.
Audit-ready logging
Every administrative action, campaign launch and authorization confirmation is written to an immutable tenant audit log.
Compliance mapping
Courses carry HIPAA, PCI DSS, SOC 2, ISO 27001 and NIST mappings so you can evidence your awareness program.
From spreadsheet to program
Four steps, no implementation project.
- 01
Import your people
Upload a CSV or add employees by hand. Departments, groups and roles keep targeting simple as you grow.
- 02
Assign training
Pick courses from the library, set a due date and a pass mark. Learners get their own portal and certificates.
- 03
Run an authorized simulation
Confirm authorization, launch, and watch delivery, clicks, submissions and reports land in real time.
- 04
Prove the program
Risk scores, completion trends and an immutable audit log give auditors evidence instead of assurances.
Pricing that scales with headcount
Every plan includes the full training library, the learner portal and tenant isolation. Billed per active employee — invited and deactivated people are free.
Starter
$0
up to 10 employees
Get your first awareness program running without a procurement cycle.
- Core training library
- 1 phishing simulation per month
- Learner portal & certificates
- Basic completion reporting
- Email support
Team
$3
per employee / month
For growing teams that need continuous training and real phishing data.
- Everything in Starter
- Unlimited phishing campaigns
- Automatic remedial training
- Employee risk scoring
- Departments, groups & CSV import
- Compliance tags & exports
Business
$6
per employee / month
For regulated organizations that have to evidence every control.
- Everything in Team
- Full audit log retention
- Custom phishing templates
- Role-based admin delegation
- Auditor read-only access
- Priority support
Enterprise
Custom
annual agreement
Multi-entity programs with security review, SSO and bespoke terms.
- Everything in Business
- SSO / SAML & SCIM provisioning
- Multiple organizations & rollups
- Custom courses and branding
- Security review & DPA
- Named success contact
Simulations you can defend in an audit
Campaign launches require an explicit authorization confirmation from an administrator, which is written to the audit log. Awareness forms record only that a submission happened — field values are never transmitted or stored.
Common questions
Do simulations ever capture real credentials?
No. Awareness forms record only that a submission happened. Field values are never transmitted or stored anywhere in the platform.
How is my data separated from other customers?
Tenancy is enforced in the database with row-level security, not in application code. Rows from another organization are unreachable, even by a bug.
Can I change plans later?
Yes. Plans are billed per active employee, so you can move up or down as your headcount changes — everything you have already created stays in place.
What counts as an employee?
Any active member of your organization. Invited-but-inactive people and deactivated accounts are not billed.
Start your awareness program today
Free for your first ten employees. Set up your organization in a couple of minutes.
Create your organization