BEC · CEO fraud
Fake CEO. Real loss.
An urgent payment request from the top of the company. Correct tone, correct signature, wrong sender.
Takeaway Verify on a second channel before money or data moves.
Sample library
Everything below is our own work, produced in-house, and playable right now. It is here so you can judge the standard rather than take our word for it.
How we build learning
Micro-film series
Sixty seconds per threat. One behaviour to change, delivered in the time someone will actually give you. Built for LMS intros, campaign drops, town halls and internal comms.
BEC · CEO fraud
An urgent payment request from the top of the company. Correct tone, correct signature, wrong sender.
Takeaway Verify on a second channel before money or data moves.
AI · Deepfake
Synthetic video and cloned voice have moved from research demo to a working fraud tool. The call looks normal.
Takeaway A face on a screen is not identity verification.
Quishing · QR phishing
A QR code moves the attack to a personal phone, outside mail filtering, outside the managed device, outside the log.
Takeaway Treat an unexpected QR code exactly like an unexpected link.
Credential · Password spraying
Attackers do not guess one account a thousand times. They try one common password against a thousand accounts.
Takeaway Unique passphrases turn one compromise into one compromise.
MFA fatigue · Push bombing
Approval prompts at 2am until one is accepted. The control worked. The moment did not.
Takeaway Deny every prompt you did not start, then report it.
Vishing, shadow AI, supplier impersonation, insider mistakes and physical tailgating. Series clients get each one on release, brandable to your organisation.
No episodes in that category yet.
Nothing loads from YouTube until you open an episode — the grid ships as static images, so the page stays fast and sets no third-party cookies on arrival.
Playable simulation
A twenty-five minute cyber escape room. Five stations, a live attacker, a clock that punishes guessing. It runs in the browser and reports a score back to your LMS like any other SCORM module.
23:47 · Level 3 · badge readers offline
A finance workstation has been talking to a server in another country for ninety minutes. The security team is mid-flight. You are the only person in the building.
Plays here · no login · no install
Each station is a real decision an employee has to make under pressure, and each one releases one character of the exit door code. Wrong moves and hints both cost time, so the score reflects judgement rather than persistence.
What we deliver
Most programmes fail because the format was chosen before the behaviour was defined. This is the order we recommend instead.
| Format | Use it when | Typical length | Delivery |
|---|---|---|---|
| Micro-film | You need attention and recall across the whole workforce, fast | 45–90 seconds | MP4, LMS, intranet, screens, Teams & Slack |
| Simulation | The behaviour only shows up under time pressure and ambiguity | 20–40 minutes | SCORM 1.2 / xAPI, scored |
| Scenario module | A role has specific decisions to get right — finance, HR, support | 10–15 minutes | SCORM 1.2 / xAPI, scored |
| Phishing simulation | You need behavioural data, not self-reported confidence | Continuous | Platform-delivered, segmented by risk |
| Campaign kit | The message has to stay visible between formal training | Monthly drop | Posters, mailers, carousels, screen loops |
| Live workshop | Leadership, finance approvers and high-risk groups need the room | 60–120 minutes | On-site or virtual, facilitated |
Everything is produced against your brand, your systems and your real incident history. The samples on this page use our own branding because they are ours — yours would not.
Commission the work
Send us the behaviour you need to change and the audience it applies to. We will come back with a treatment, a timeline and a number.