Review the request.
An employee sees a realistic business situation, such as a vendor asking accounting to update payment details.
Employee cybersecurity training
Security awareness training for small businesses
Would your team know when to stop and verify? A supplier changes its bank details. A caller wants an MFA code. A shared document asks for another sign-in. The request looks familiar—but the next decision matters.
From $49/month for up to 10 people · Short weekly scenarios · Employee completion tracking
Compare training and annual bundlesHow it works
See how a training challenge works.
An ordinary-looking request. A few decisions. A useful explanation.
Choose the next step.
The challenge asks what should be checked, how the request should be verified, and when to stop or report it.
Understand the warning signs.
Feedback explains why the choice matters and how to handle a similar request at work.
Keep a record of participation.
Managers can review assigned training and completion results in the business workspace once enrollment opens.
Everyday decisions
Security awareness training for daily business decisions.
The training focuses on the requests your team is most likely to encounter in regular operations.
Phishing and document-sharing requests
Practice spotting suspicious invoices, shared files, sign-in pages, delivery notices, and messages that imitate familiar business services.
Payment changes and business email compromise
Recognize requests to change bank details, bypass approval, buy gift cards, or move a conversation to an unfamiliar address. Reinforce independent verification before money moves.
Account access and unexpected MFA prompts
Work through unexpected authentication requests, repeated approval prompts, and callers claiming to be IT support. Learn when to deny, verify, and report.
Confidential information and AI tools
Think through what should happen before customer information, employee records, internal documents, or sensitive business details are shared with an unfamiliar recipient or AI service.
Built for real work
Built around the work your team recognizes.
Small businesses do not all face the same requests. The training focuses on decisions that occur in ordinary work: handling payments, opening documents, granting access, and sharing information.
Relevant business situations include supplier invoices, payroll updates, customer file requests, dispatch documents, carrier-portal notices, and urgent account alerts.
Tell us which workflows matter most to your team when you inquire. We will confirm the available content and scope before enrollment.
Recurring program
A recurring program your business can keep running.
The planned business subscription includes:
- Short weekly scenarios assigned through your business workspace.
- Practical feedback explaining the safer decision.
- Training on phishing, payment fraud, account access, and information handling.
- Employee assignment and completion records.
- Manager visibility into participation and training scores.
The training uses scenarios. It does not ask employees to submit real account passwords, customer files, or banking credentials as exercise content.
Planned pricing
Plans sized for small and midsize teams.
Practical employee training, priced for small and midsize businesses. Every plan includes the same core training experience. Choose your team size and monthly or annual billing.
Business enrollment is coming soon. Published pricing applies to the planned business training subscription; inquiry buttons do not take payment.
1–10 people
$49
per month
Annual: $490/year
Ask about this plan11–25 people
$99
per month
Annual: $990/year
Ask about this plan26–50 people
$199
per month
Annual: $1,990/year
Ask about this planSavings compare annual billing with 12 monthly payments. Prices are in USD. More than 50 people? Contact us for a scoped quote. Confirm who counts toward seats before enrollment.
Annual bundle
Weekly training plus quarterly phishing simulations.
Combine recurring weekly awareness training with four controlled email campaigns over 12 months. The annual bundle adds campaign-specific follow-up training, dated campaign reports, and an annual leadership readout to the training subscription.
1–10 people
$1,395/year
Separate annual services: $1,485/year
Annual savings: $90
Ask about the annual bundle11–25 people
$2,295/year
Separate annual services: $2,485/year
Annual savings: $190
Ask about the annual bundle26–50 people
$3,995/year
Separate annual services: $4,485/year
Annual savings: $490
Ask about the annual bundleBundles are billed annually. The separate-service totals combine the annual awareness subscription and existing annual managed phishing program for the same team size. Campaign follow-up training is distinct from the recurring weekly scenarios. Standard phishing scope is one business domain and one email environment; unusual delivery requirements or custom exercises are scoped separately.
Need simulated phishing emails too?
Awareness training gives employees practice and feedback inside a training workspace.
Managed phishing testing sends controlled test emails to authorized participants and records campaign results. If you need an email simulation now, explore our existing managed phishing testing service. It is available separately and includes campaign-specific follow-up training.
Getting started
Getting your team started.
Tell us about your business.
Share your team size, common workflows, and any specific training or documentation request.
Confirm the plan.
We will explain enrollment availability, seat limits, billing, and what the program includes.
Start the program.
Add your employees through the business workspace and begin the recurring training schedule when enrollment opens.
Review participation.
Use completion records and training results to identify where follow-up would help.
Common questions
Common questions about small-business security awareness training.
What is security awareness training?
It helps employees recognize suspicious requests and practice safer responses. Our planned business program uses short scenarios about email, payments, account access, and information handling, followed by practical feedback.
Is this the same as phishing testing?
No. This subscription focuses on decisions inside a training workspace. Managed phishing testing sends controlled simulated emails and reports campaign interactions. You can discuss either service with us, depending on what your business needs.
How much time will employees need?
The weekly scenarios are designed to fit into a normal workday. Employees review a situation, answer a few decision questions, and receive feedback. Time varies by scenario; there is no fixed completion-time promise.
Can a small team use it?
Yes. The planned seat bands start with teams of up to 10 people, followed by 11–25 and 26–50. Larger teams can contact us to discuss scope. Training starts at $49/month or $490/year for up to 10 people. Annual training-plus-phishing bundles start at $1,395/year. Confirm seat-counting rules before enrollment.
Can we bundle training with phishing simulations?
Yes. Annual bundles combine weekly awareness training with four managed phishing campaigns, campaign-specific follow-up training, dated reports, and an annual leadership readout. Prices are $1,395/year for 1–10 people, $2,295/year for 11–25, and $3,995/year for 26–50. Business training enrollment is coming soon; ask us about the right bundle for your team.
Can we buy just training or just a phishing campaign?
Yes. The weekly training subscription and managed phishing service remain separate options. Training subscriptions start at $49/month. Existing standalone phishing campaigns start at $395 for up to 10 participants. No Security Baseline is required.
What training records will managers see?
The planned workspace will show assigned scenarios, completion status, and training results. These records document participation; scores are not proof that a business is secure or that an employee will always recognize a real attack.
Can the records support an insurance or customer request?
They can help document training activity. Share the exact request with us so we can distinguish awareness training from simulated phishing, required frequency, and participant coverage. Your insurer or customer decides whether the records meet its requirements.
Does this replace our IT provider?
No. Employee training supports the safeguards and procedures your business and IT provider maintain. It can reinforce verification and reporting habits alongside account protection, software updates, and other controls.
Can we enroll today?
Business enrollment is coming soon. Contact us to discuss your needs. If you need a managed phishing campaign now, our existing phishing testing service is available separately.
Related guidance
Keep building practical security habits.
Explore related guidance for the requests small-business teams see around email, portals, and sensitive information.
Fake logistics apps and stolen login codes
See why a routine app request deserves verification before an employee installs it.
Read the logistics guideRecognize a fake trucking portal
Review practical warning signs around carrier portals, load documents, and urgent account requests.
Read the portal guideNeed a controlled email campaign?
Use the existing managed phishing testing service when you need campaign results and follow-up training now.
Explore phishing testingHelp your team recognize the request that deserves a second look