Cyber-Sec.ITMade in GermanyHosted in Europe
Raise employee awareness. Reduce risk.
Automated phishing simulations and awareness training – right from the inbox. Your partner for a strong security culture.
Features
Everything awareness needs – without the effort
Plan, run, evaluate: our platform automates the entire cycle of simulation and training.
Urgent: Your invoice is overdue
Simulated – no risk for your employees
- Team meeting tomorrowCalendar · 09:15
- !Urgent: Your invoice is overdueIT Security Support
- Project update wk 38Projects · 08:02
Selection mode
Difficulty
- New training assignedRight in the inbox
- Reminder 1 of 3Your training is still waiting
- Reminder 2 of 3Please complete the training
- Training completedFurther reminders stop
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx- ATAlex Tayloralex.taylor@example-company.com
- SJSarah Jenkinssarah.jenkins@example-company.com
- Users synchronised
Resilience Distribution
Department Performance
Dashboard
Your security metrics at a glance
From click and report rates to awareness development: see instantly where your company stands and which departments need support.
Sample view with demo data.
Resilience Distribution
- Safe
- Aware
- At Risk
- Critical
Department Risk Quadrant
Simulation Activity
- Clicks
- Reports
Department Performance
Recent Simulation Activity
- IT UserLink clicked46 min ago
- Finance UserTraining started4 days ago
- IT UserReported5 days ago
- IT UserTraining started1 week ago
Advanced Security Metrics
Training Health
Overall completion rate of assigned learning.
Training Status Distribution
- Completed
- Pending
- In progress
- Expired
Training Activity
- Started
- Completed
Department Training Performance
Training Overview Metrics
Phishing simulations
Deceptively real. Safely reported.
Whether malicious link or attachment: employees report suspicious messages directly with the Outlook button. This trains and measures not only recognition but also reporting behaviour.
- Simulated links and attachments
- Built-in “Report Phishing” button
- Automatic capture and evaluation
Urgent: Renewal of your MFA authentication device for Single Sign-On
SSO | Example Ltd. Identity Security
Security updateMFA security factor renewal required
Hello Alex,
as part of the switch to stricter security certificates in the SSO portal of Example Ltd., the registered multi-factor authentication (MFA) device for your user account (alex.taylor@example-company.com) will expire shortly.
Important: To prevent your VPN and cloud access from being blocked automatically after 18 Sep 2026, please re-register your authenticator app in the central identity portal.
This notification was triggered automatically on behalf of Example Ltd.
Message moved to “Deleted items”
Learning moment
Turn clicks into learning
After a click on a simulated link the interaction is captured automatically and evaluated directly in the dashboard. The person gets immediate feedback – without blame, but with clear next steps.
Wait! This was a simulation.
You just interacted with a security awareness simulation. Don’t worry: this was an internal test.
What happens next?
- Stay vigilantCheck the sender address and link target before clicking.
- Report suspicious emailsIn future, use the report button in your email client.
- Use trainingShort training modules help you spot these patterns faster.
Training
Learn where employees already work
Short learning units right in the inbox. Employees pick an answer and immediately get feedback with matching explanations.
- Knowledge checks with instant feedback
- Completion rate and status per department at a glance
- Automatic reminders for open trainings
ScenarioHello Max,
Imagine you receive an email about a parcel that cannot be delivered because of an incomplete address. The email contains a large button labelled “Reschedule delivery”. But when you check the destination address, you notice the actual link points to a suspicious, unofficial website instead of the official logistics site.
Warning signs
- Mismatched link targetsChecking the destination (hover over the link, or long-press on mobile) reveals a suspicious target.
- Unexpected notificationsUrgent messages about parcels or deliveries you neither ordered nor expected.
- Urgent login requestsYou are pressured to sign in or reveal credentials to fix a trivial problem.
Try it – choose an answer.
Autopilot
Set it up once. Protected for good.
Central settings for automated simulations and training assignments – including adaptive difficulty, a grace period for new users and the Outlook report add-in.
Phishing autopilot
The better the score, the more demanding the next simulation.
- Score-driven
- Matching simulation
- Sent automatically
Training autopilot
Up to three reminders for ignored trainings.
- New training assignedRight in the inbox
- Reminder 1 of 3Your training is still waiting
- Reminder 2 of 3Please complete the training
- Training completedFurther reminders stop
- Smart (adaptive) or manual mode
- Configurable delay for new users
- Dedicated inbox for reported emails
- Monthly and reactive training assignments
Setup
Quick and easy to set up
Ready in a few steps: connect Microsoft 365 and configure. Simulations, training and reporting then run on their own.
What you do once
Connect
Connect Microsoft 365 via Entra tenant ID. Your users are synchronised.
Configure
Enable the autopilot, set the difficulty and the report add-in.
What the platform handles
Simulate and train
Simulations and learning units run automatically in the inbox.
Evaluate
Clicks and reports are recorded. Follow results and trends in the dashboard.
About us
Our mission: protecting mid-sized businesses.
Driven by a passion for cybersecurity, we want to protect mid-sized companies effectively against attacks. As your partner, we provide a high-quality, reliable and secure platform that makes security awareness simple and easy to understand.
- Built for mid-sized businesses
- Practical, easy to understand and free of unnecessary bloat.
- Fairness and transparency
- Clear terms, personal contact.
- High availability
- A platform you can rely on.
- Made in Germany, hosted in Europe
- Data protection to European standards.
FAQ
Frequently asked questions
Short and clear: the key answers on simulations, training and getting started.
How do the phishing simulations work?
The platform automatically sends realistic phishing emails with links or attachments straight to your employees’ inboxes. Clicks and reports are recorded and evaluated in the dashboard.
What happens when someone clicks a simulation?
After the click, employees immediately see a learning page with feedback: they learn that it was a simulation and get tips on what to do next. The interaction is recorded in the dashboard. Trainings are assigned independently of the phishing simulations.
How do employees report suspicious emails?
With the “Report Phishing” button right in Outlook. One click sends the email to your security team. This trains not only recognition but also reporting behaviour.
What do I need to get started?
You need Microsoft 365. Connecting takes little time via your Entra tenant ID, after which your users are synchronised. Then you configure the autopilot – the platform takes care of the rest.
What is the autopilot?
The phishing autopilot selects simulations adaptively and risk-driven: difficulty adjusts automatically to each employee’s score. The training autopilot assigns learning content automatically and sends up to three reminders for ignored trainings.
Where is the data hosted?
The platform is made in Germany and hosted in Europe, specifically in Finland (Helsinki). Data protection follows European standards.
Who is the platform for?
For small and medium-sized businesses: we want to protect companies that want to make security awareness simple and understandable – without a lot of effort.
How can I get to know the platform?
Talk to us – we’ll be happy to show you the platform in person. Simply use the “Get in touch” button.
Ready for a stronger security culture?
Talk to us – we’ll be happy to show you the platform in person.