Courses people learn from
Spot-the-flags emails, branching scenarios, sorting exercises and quizzes that change on every attempt. In English, French, Spanish and Arabic.
Stegnos · security awareness training
Security training your people actually finish.
Short, practical courses with real-looking emails, calls and decisions. Assign them in minutes, remind people automatically, and show auditors exactly who completed what.
7 days free · no card · four languages including Arabic
- Courses
- 32
- Questions in the bank
- 1,763
- Hands-on exercises
- 70
- Languages
- 4
Try it now
Practise on what attackers really send.
This exercise comes straight from one of the courses. Select each part of the message that gives it away, exactly as your people will.
- A different quiz every time1,763 questions in the bank. Each attempt draws its own set, so answers can’t be passed around.
- Hands-on, not slides70 exercises: real-looking emails, text messages, calls and decisions with consequences.
- In each person’s languageFrench, English, Spanish and Arabic, picked from their browser, with right-to-left layouts for Arabic.
A second message arrives the same week. Select each part that should stop you.
Daniel Ortiz <d.ortiz@helixgroup-ceo.com>
Confidential – need your help today
Select every part of the message that looks suspicious · 0 of 3 red flags reviewed
See it in a minute
Why we built this, in one minute.
The risk, why most security training fails, and how the platform fixes it.
What you get
Everything a security awareness programme needs, in one place.
Assign once, remind automatically
Target the whole organization, groups or individuals, set due dates and recurrence, and let reminders go out by email, Slack or Microsoft Teams.
A Report phishing button
People report suspicious emails from Outlook in one click. Your security team reviews them and everyone gets feedback.
Human risk at a glance
A risk score per person and team from training, reporting and overdue work, so you know where to focus next.
Certificates and audit evidence
Branded certificates anyone can verify by QR code, exportable evidence per framework, and a tamper-evident audit log.
Built secure, by default
Two-step verification and passkeys, single sign-on and SCIM, strict separation between organizations, and no learner data shared across them.
How it works
Live in an afternoon.
- 01
Create your space
Pick your organization’s address and confirm your email. Your 7-day trial starts straight away.
- 02
Invite and assign
Add people one by one or from a spreadsheet, put them in groups and assign the courses that fit their role.
- 03
Track and prove
Watch completion rise, send reminders, and export evidence when the auditor asks.
Compliance
Mapped to the frameworks you are audited against.
Every course lists the controls it supports, so your training plan doubles as audit evidence.
See the full mappingBuilt for Africa
Made for organizations across Africa.
From Dakar to Nairobi and Johannesburg: the languages your people speak, the laws you answer to, and phones as much as computers.
- French, English and Arabic. Each person learns in their own language; your reports stay in yours.
- Local data protection laws. POPIA, the Nigeria Data Protection Act, Kenya, Morocco, Senegal, Côte d’Ivoire and more. See them
- Works on any phone. Lessons, quizzes and certificates fit the small screen people carry.
- Proof auditors accept. Certificates anyone can verify with a QR code, and evidence exports per framework.
Course catalogue
From phishing basics to secure coding.
SCORMIn free trial
AI and Deepfake Scams (EN-FR)
Built for finance teams, executives, assistants and procurement. Learners see how CEO fraud, fake supplier bank-detail changes and compromised mailboxes turn one believable message into a lost payment, and where each attack can be stopped. They learn to judge the request rather than the sender, call back on a known number before any change of details, verify urgent executive requests without fear, and report within minutes. About 30 minutes, narrated real-life scenarios, 20-question final quiz (80% to pass). Supports PCI DSS 12.6.3.1 and ISO 27001 A.6.3.
SCORMIn free trial
PCI DSS Awareness for Card Handlers / Sensibilisation PCI DSS (EN/FR)
Practical PCI DSS v4.0.1 training for anyone who takes or handles card payments. Learners learn what account data is, where it flows and the golden rule of never storing sensitive authentication data. They practise safe card-present payments, spotting terminal tampering and skimmers, handling phone and email orders, storing and destroying paper, protecting passwords and access, resisting phishing and social engineering, recognizing fraud at the counter and reporting incidents. About 60 minutes, 15 narrated modules, 25-question final quiz (80% to pass).
SCORMIn free trial
Privileged Access for Administrators (EN-FR)
For IT administrators and privileged users, whose accounts are the top target. Learners apply least privilege and just-in-time elevation, use admin accounts only on dedicated admin devices, and protect them with strong, named, phishing-resistant authentication. They keep secrets in the vault, make no change without a ticket, rely on logs, verify before granting access, control third-party access and remove access when the need ends. About 35 minutes, 11 narrated modules, 25-question final quiz (80% to pass). Supports ISO 27001 A.5.15, A.5.18, A.8.2, A.8.5 and A.8.15.
SCORMIn free trial
Secure Coding Essentials (EN-FR)
Security is part of quality. Aligned with the OWASP Top 10, this course gives developers, DevOps engineers and testers the habits that prevent the most common flaws: threat modelling early, validating input on the server, keeping data and code separate, encoding output by context, using proven authentication and crypto, checking authorization on every request, keeping secrets out of code, managing dependencies, logging events without secrets and securing APIs. About 40 minutes, 13 narrated modules with code scenarios, 25-question final quiz (80% to pass). Supports ISO 27001 A.8.25-A.8.29.
SCORMIn free trial
Security Awareness Fundamentals (EN-FR)
The essential starting point for every employee. Learners discover why they are part of the defense and build the core habits that stop most attacks: spotting pressure and phishing, checking links, using unique passwords with a manager and MFA, keeping devices locked and updated, handling data carefully, working safely anywhere, challenging tailgaters, avoiding unapproved tools, thinking before sharing and reporting fast without blame. About 35 minutes, narrated real-life scenarios, 25-question final quiz (80% to pass). Supports ISO 27001 A.6.3, NIST CSF and PCI DSS 12.6.
SCORMIn free trial
Working Safely from Home and on the Move (EN-FR)
Wherever people work, the office rules travel with them. Learners secure their home network in twenty minutes, keep work and personal use separate, and run video calls without exposing information. They learn to use a hotspot or trusted Wi-Fi with the VPN, protect screens and conversations in public, travel light with devices kept close, manage paper at home, and report a lost or stolen device within the hour. About 30 minutes, narrated real-life scenarios, 20-question final quiz (80% to pass). Supports ISO 27001 A.6.7 and A.8.1, and NIST CSF.
Free trial
7 days to see it work with your people.
No card, no sales call. Upgrade when you are ready and keep everything you set up.
- 6 foundation courses to assign and complete
- Up to 20 people, with reminders and reports
- Certificates to view in the browser (PDF download with a plan)
- The full catalogue opens the moment you upgrade
- Your organization’s data is kept separate from everyone else’s
See it working with your own people this week.
Free for 7 days, up to 20 people, no card. Your training records stay yours when you upgrade.