Cybermatic Awareness
Train your people on the threats they actually face.
Phishing simulation and security-awareness training that runs on your real directory — no uploads, new hires enrolled automatically. Realistic AI templates, a teachable moment the instant someone clicks, auto-assigned lessons, and the completion evidence insurers ask for.
$2 / user / month, billed annually · 20-user minimum · 20% off with a Posture plan
Targets your real directory
Campaigns go to your actual Microsoft 365, Entra, Okta, or Google users. New hires are enrolled automatically; leavers drop off. Nothing to upload, nothing to keep in sync.
Realistic, never deceptive about brands
AI-generated templates from generic pretexts — document shares, IT resets, HR notices — from neutral role senders on dedicated domains. No real-brand impersonation, ever.
Teaches at the moment of the click
The landing page reveals the simulation and offers a three-minute lesson right then. Clickers are auto-assigned the matching training — emailed, on the page, or both.
Send now, scheduled, or staggered
Fire immediately, schedule for a time, or spread delivery randomly across hours so staff comparing inboxes can't spot it.
Evidence for insurers and auditors
Click rates, report rates, and training completion feed your Insurance Readiness and Quarterly Security Review reports, and export as a program report.
Repeat-clicker tracking
See who falls for simulations more than once across campaigns — the people to train first — and prove the program is working over time.
Privacy and consent, built in
Simulations are a consented, standard condition of employment — an administrator enables them once and that authorization is recorded; individual employees aren't asked to opt in. Every message is tagged as a simulation, landing pages carry a hidden marker so your team can distinguish drills from real attacks, the optional credential-capture step never stores what's typed, and an acceptable-use notice template is included for your staff policy.
Questions
How is this different from standalone awareness tools?
It targets your real directory. Because Cybermatic already connects to Microsoft 365, Entra, Okta, or Google, campaigns go to your actual people — new hires enrolled automatically, leavers dropped — with nothing to upload or keep in sync. Results flow back into your security posture and into the Insurance Readiness and Quarterly Security Review reports your other Cybermatic products already produce.
Does the simulation email look real without impersonating brands?
Yes. Templates are AI-generated from realistic, generic pretexts — a shared document, an IT password reset, an HR portal notice — sent from neutral role senders like 'IT Support' or 'Document Center' on dedicated training domains. We never impersonate real companies or people; every message carries a simulation header, and landing pages carry a hidden marker, so your security team can always tell a drill from a real attack.
What happens when someone clicks?
They reach a landing page that records the click and then — immediately, at the teachable moment — reveals it was a safe simulation and offers a short lesson. Anyone who clicks is automatically assigned the matching micro-lesson (you choose whether it's emailed, shown on the reveal page, or both).
Do you capture passwords?
Only if you turn on the optional credential-capture landing page per campaign (off by default). Even then, the value is never received or stored — we record only that a submit happened, so you can measure who would have handed over a password. No real credential ever reaches Cybermatic.
Do employees need a login to take training?
No. Lessons open from a personal link with no login — a three-minute read and a short quiz — and completion is tracked for you. New hires and existing staff alike are reached through your directory.
How do simulations get sent without landing in spam?
From dedicated, authenticated sending domains (SPF, DKIM, DMARC), staggered to look natural. Your administrator enables simulations once (recorded authorization), and you add a one-time mail allow-list — we guide you through it.
How is it priced?
$2 per user per month billed annually ($2.50 monthly), with a 20-user minimum — and 20% off when you also run a Cybermatic Posture plan. You're charged for seats, not for how many people you enroll, so enroll everyone.
Who can run campaigns?
Owners and Awareness administrators launch campaigns and accept the simulation terms; viewers can see results but can't send. Simulations are a standard, consented condition of employment — individual employees don't opt in, and the product includes an acceptable-use notice template for your staff policy.