Walk into a 3D lesson.Watch a learner go through the bar scenario, step by step.One platform for human risk management.
Fifteen capabilities that work together: Cyberfrog finds where you are exposed, simulates the attacks that would hit you, trains people on exactly those, and proves the progress.
Awareness content in minutes, not months.
Generate complete, on-brand security-awareness content from a simple prompt or an uploaded document: web courses, videos, posters, emails and lessons built from real incidents.
- Turn a policy PDF into a short interactive course
- Narrated videos and print-ready posters in your branding
- Incident-based lessons the day a new threat appears
A year of awareness that runs itself.
Build long-running, branching journeys that combine training, simulated attacks and follow-ups based on how each employee actually responds, all year long.
- Monthly themes with automatic scheduling
- Extra practice for people who need it, less noise for those who do not
- Compliance-ready evidence at the end of the year
One campaign. Every employee their own path.
Set the goal and the guardrails once. Cyberfrog adapts simulations, lessons and reinforcement to each person’s role, language, skills and behaviour, continuously and explainably.
- Failed: a micro-lesson now, a retest later
- Reported: recognition and a harder scenario
- Autopilot, your own rules or targeted interventions
Every employee sees their own progress.
A portal in your branding where people find their training, see their results and badges, report suspicious activity and follow a positive Security Fitness score. Managers see their team in aggregate.
- Sign in with a one-time link, no extra password
- Badges, goals and a score that never shames
- Manager view with privacy by default
Every channel attackers use, safely.
Simulate phishing emails, SMS, QR codes, malicious attachments, voice calls, video deepfakes and multi-step social-engineering chains, realistically and measurably.
- Dedicated sending infrastructure for realistic delivery
- Voice and deepfake scenarios for executives and finance
- Instant, friendly coaching when someone takes the bait
Attacks that talk back.
Live AI phone calls that hold a real conversation, cloned voices, deepfake video of a trusted face, and multi-step email and SMS conversations that react to every reply.
- Live voice calls, scored, with a full transcript
- Voice clones and deepfake avatars only with recorded consent
- Multi-stage AI conversations across email and SMS
Give us a domain. We do the recon.
Cyberfrog discovers exposed employees, high-value targets and leaked credentials, then builds targeted attack templates for you, with no manual research required.
- Public footprint of people and roles
- Leaked credentials mapped to real accounts
- Ready-to-send campaigns that mirror what attackers would do
This week’s scams, simulated this week.
Cyberfrog reads public warnings from national CERTs, consumer agencies and security vendors and turns fresh scams into a matching simulation and a short lesson for your people.
- Advisories from NCSC UK, CISA, NCSC Switzerland and more
- Choose countries, languages and the services you use
- Freshness window and fatigue caps per person
One click to report. Straight to your SOC.
A Report Phishing button for Outlook and Gmail recognises Cyberfrog simulations and rewards the reporter, and sends real suspicious emails to your security team or Microsoft Defender.
- Outlook on desktop, web, Mac and mobile, and Gmail
- Simulations recognised by a signed header
- Original email to SOC mailboxes, Defender or a signed webhook
Train the moment a real leak appears.
Cyberfrog continuously monitors the dark web and breach databases for your organization's exposed credentials and automatically triggers the right training as soon as a real exposure is detected.
- Continuous dark-web and breach monitoring
- Affected employees enrolled automatically
- Clear trail for your incident process
Catch the impostors early.
Automatically scan for typo-squatted and look-alike domains impersonating your brand, check their registration and DNS status, and reserve the dangerous ones before an attacker does.
- Typo, homoglyph and TLD variations
- Live registration, DNS and mail checks
- One-click reservation of risky domains
Human risk, in one view.
See exposure, click rates, reports and quiz results across every campaign and every channel, with exportable reports for leadership and auditors.
- Risk by department, role and location
- Trends over time, not just snapshots
- PDF and CSV exports for boards and audits
Fits the tools you already run.
Directory sync and single sign-on, mail delivery through your own infrastructure, Slack and Teams, SIEM export and a REST API.
- Microsoft 365, Google Workspace, Okta, LDAP and SCIM
- SAML and OIDC single sign-on
- Syslog, Microsoft Sentinel, Splunk, webhooks and REST API
Built for security teams.
Each customer’s data is isolated in the database, every admin action is logged, and simulations do not store what people type unless you choose to.
- Row-level tenant isolation and encrypted backups
- Audit log with CSV export, MFA and SSO for admins
- Consent required before any voice or face is cloned
One console for all your customers.
MSPs and MSSPs create and enter customer workspaces, launch campaigns across customers, share a content library and manage licences, under their own brand.
- Owner, operator, billing and viewer roles
- Campaigns across customers, with preview and approval
- Your brand on training emails and reports
Step inside the attack.
Learners enter a fully interactive 3D environment, such as a hotel room, an open-plan office or a train carriage, and face a live, voice-driven social-engineering attack with real consequences and a debrief.
- Runs in the browser, no install or headset needed
- Branching outcomes based on each decision
- Talking deepfake callers and realistic devices
Ready to see it on your domain?
We run a live recon and a 3D lesson with you in 30 minutes.