logo Home

Gamified, story-driven security training your finance lead, your designer, and your new hire will actually finish and remember.

Source: KnowBe4, Phishing by Industry Benchmarking Report: average click-prone rate across untrained organisations.

The annual click-through doesn't work

82% of breaches involve a human element. Generic training is part of the reason.

We've all sat through it. The hour-long video at the back end of onboarding, watched at 2x speed with the tab muted. It ticks a box. It changes nothing. We built the opposite.

Mini-games
Five minutes. Real decisions.
Spot-the-phish drills, password-strength puzzles, social-engineering scenarios. Each one is a self-contained game with a story, a choice, and a consequence.
Live workshops
Tabletop exercises that feel like escape rooms.
Half-day team workshops where your people run through a simulated incident together. They leave talking about it for a week.
Monthly nudges
A 90-second story in their inbox.
Once a month, a tiny, beautifully-written scenario from a real breach. Reading time: 90 seconds. Retention: months.
The library

Built around the threats that actually hit small and mid-sized businesses.

  • MOD.01

    Phishing & spear-phishing

    From the lazy Nigerian-prince to the eerily-good CEO impersonation. With real samples your team can dissect.

  • MOD.02

    Password hygiene & MFA

    Why your password manager isn't optional, and how to walk a sceptical colleague through their first setup.

  • MOD.03

    Social engineering

    The phone call from "IT support". The LinkedIn message from a fake recruiter. The supplier email asking for new bank details.

  • MOD.04

    Data handling & GDPR

    What goes in a shared folder, what doesn't, and how to answer a customer's data-deletion request without panic.

  • MOD.05

    Remote & travel security

    Public WiFi, hotel laptops, USB sticks at conferences. The boring stuff that ends careers.

  • MOD.06

    Incident reporting

    How to raise the alarm in the first 60 seconds, without fear of blame. The single highest-leverage skill on this list.

Try one in 30 seconds

Spot the phish.

Here's an email that landed in a real customer's inbox last month. Click the parts that gave it away.

inbox · 1 message 0/4
Quick favor: are you at your desk?
From: Reply-To: Subject: Quick favor: are you at your desk?

Hi Sarah,

I need to get something processed before I head into the 3pm with the board and didn't want to Let me know and I'll send details.

Michael

Sent from my iPhone

Click the giveaways inside the email.
Why it sticks

Designed by people who hate boring training as much as you do.

92%

Module completion rate

78%

Reduction in simulated-phishing click-through after 90 days

4.7 / 5

Internal NPS from learners

How it's delivered

Three formats. Pick what fits your team.

Self-paced platform

Pay per employee

Your team logs in, plays through modules, earns badges. Manager dashboard shows progress without surveilling.
Live workshop day

Pay hourly

A workshop that doubles as a team-building event. Live phishing simulations, team challenges, and plenty of laughs while everyone actually learns something. We come to you or join virtually. Great as a kick-off, annual refresh, or new-team bonding day.
Embedded programme

Custom scope

12-month programme combining platform, quarterly workshops, monthly nudges, and a phishing-simulation track.

Want to know how it works?

We'll give you a quick taste; no pitch, no pressure.