Courses people learn from
Spot-the-flags emails, branching scenarios, sorting exercises and quizzes that change on every attempt. In English, French, Spanish and Arabic.
Stegnos · security awareness training
Security training your people actually finish.
Short, practical courses with real-looking emails, calls and decisions. Assign them in minutes, remind people automatically, and show auditors exactly who completed what.
7 days free · no card · four languages including Arabic
- Courses
- 23
- Questions in the bank
- 889
- Hands-on exercises
- 70
- Languages
- 4
Try it now
Practise on what attackers really send.
This exercise comes straight from one of the courses. Select each part of the message that gives it away, exactly as your people will.
- A different quiz every time889 questions in the bank. Each attempt draws its own set, so answers can’t be passed around.
- Hands-on, not slides70 exercises: real-looking emails, text messages, calls and decisions with consequences.
- In each person’s languageFrench, English, Spanish and Arabic, picked from their browser, with right-to-left layouts for Arabic.
This text message arrived while you were waiting for a delivery. Select each part that gives it away.
+44 7700 900461
Select every part of the message that looks suspicious · 0 of 3 red flags reviewed
See it in a minute
Why we built this, in one minute.
The risk, why most security training fails, and how the platform fixes it.
What you get
Everything a security awareness programme needs, in one place.
Assign once, remind automatically
Target the whole organization, groups or individuals, set due dates and recurrence, and let reminders go out by email, Slack or Microsoft Teams.
A Report phishing button
People report suspicious emails from Outlook in one click. Your security team reviews them and everyone gets feedback.
Human risk at a glance
A risk score per person and team from training, reporting and overdue work, so you know where to focus next.
Certificates and audit evidence
Branded certificates anyone can verify by QR code, exportable evidence per framework, and a tamper-evident audit log.
Built secure, by default
Two-step verification and passkeys, single sign-on and SCIM, strict separation between organizations, and no learner data shared across them.
How it works
Live in an afternoon.
- 01
Create your space
Pick your organization’s address and confirm your email. Your 7-day trial starts straight away.
- 02
Invite and assign
Add people one by one or from a spreadsheet, put them in groups and assign the courses that fit their role.
- 03
Track and prove
Watch completion rise, send reminders, and export evidence when the auditor asks.
Compliance
Mapped to the frameworks you are audited against.
Every course lists the controls it supports, so your training plan doubles as audit evidence.
See the full mappingBuilt for Africa
Made for organizations across Africa.
From Dakar to Nairobi and Johannesburg: the languages your people speak, the laws you answer to, and phones as much as computers.
- French, English and Arabic. Each person learns in their own language; your reports stay in yours.
- Local data protection laws. POPIA, the Nigeria Data Protection Act, Kenya, Morocco, Senegal, Côte d’Ivoire and more. See them
- Works on any phone. Lessons, quizzes and certificates fit the small screen people carry.
- Proof auditors accept. Certificates anyone can verify with a QR code, and evidence exports per framework.
Course catalogue
From phishing basics to secure coding.
Passwords and MFAIn free trial
Passwords, Passkeys and MFA
Why long, unique passwords and a password manager beat complexity rules, and how passkeys and MFA protect you.
PhishingIn free trial
Phishing: Spot the Red Flags
Inspect real-looking emails, learn the signs that give phishing away, and practise what to do next.
Physical securityIn free trial
Physical Security in the Workplace
Tailgating, visitors, clear desks, printers and found USB devices: protecting the places where information lives.
Secure developmentIn free trial
Secure Coding Essentials
The flaws behind most application breaches, and the coding habits that prevent them: validating input, parameterised queries, safe output, access checks and secret handling.
FundamentalsIn free trial
Security Awareness Fundamentals
The annual baseline: why attackers target people, the habits that stop most incidents, and how to report.
SCORMFull plan
AI and Deepfake Scams (EN-FR)
Built for finance teams, executives, assistants and procurement. Learners see how CEO fraud, fake supplier bank-detail changes and compromised mailboxes turn one believable message into a lost payment, and where each attack can be stopped. They learn to judge the request rather than the sender, call back on a known number before any change of details, verify urgent executive requests without fear, and report within minutes. About 30 minutes, narrated real-life scenarios, 20-question final quiz (80% to pass). Supports PCI DSS 12.6.3.1 and ISO 27001 A.6.3.
Free trial
7 days to see it work with your people.
No card, no sales call. Upgrade when you are ready and keep everything you set up.
- 5 foundation courses to assign and complete
- Up to 25 people, with reminders and reports
- Certificates to view in the browser (PDF download with a plan)
- The full catalogue opens the moment you upgrade
- Your organization’s data is kept separate from everyone else’s
See it working with your own people this week.
Free for 7 days, up to 25 people, no card. Your training records stay yours when you upgrade.