Campaigns on every channel attackers use

• Email and SMS
• AI voice calls
• Microsoft Teams

Campaigns are scheduled by department, by group and by level of seniority, in the languages your employees actually work in. Two to three run every month, year after year.

Metrics detailed enough to act on

The dashboard is where the program becomes visible. It shows:

• One Company Security Score, plus full training coverage – the share of employees the training has reached
• Failure rate and reporting rate, campaign by campaign
• Time-to-report – how many minutes pass before a suspicious message reaches your security team
• Failure rate against reporting rate over time, so you can see the moment reports overtake clicks
• Breakdowns by department, group and seniority, so you can see where the risk actually sits

Every view exports as a finished report for your board, your auditors and your regulator.

Nano-lessons, delivered in the seconds after a failure

The platform delivers a nano-lesson the moment an employee falls for a simulated attack. A nano-lesson is one idea, short enough to read on the spot and simple enough to recall when the real attack arrives. Short, contextual, and it never blames the employee.

A report button that makes flagging routine

Employees report suspicious messages in one click, from the tools they already use. Every report feeds the same metrics.

Practical Anti-Phishing Training

The training program our team runs on the platform. We write the scenarios, schedule the campaigns, filter the data and produce the reports. Your side spends about three hours a month – approving, not preparing. Across our client base, failure rates fall from over 50% to under 4% within twelve months, and the reporting rate rises from 2% to 48% by month six.

Fully managed or on-premises

We run every campaign; you log in for the results. Or you deploy the platform on your own infrastructure and your team runs it in-house, with our scenarios, updates and support behind you.

Built for EU regulation

Reporting helps you meet the security awareness requirements of NIS2, DORA, ISO 27001 and GDPR.

About SECAWA

For more than seven years we have built cyber-resilience for government institutions and enterprises in Poland – a country on the eastern flank of NATO and the European Union. That puts us inside a live cyber conflict every working day, so our scenarios are built from the techniques in use right now, and rewritten as those techniques change. More than 120,000 employees trained, across more than ten industries.

Together with CDeX

Cyber Security Mass Training System combines Practical Anti-Phishing Training for everyone in the organization with the CDeX cyber range for your IT and security teams, who contain what gets through.