Train
Training that measures judgement, not attendance.
A completion rate tells you somebody clicked Next eleven times. Cyber Guys modules ask people to make the decision they would actually face, then measure what they chose — and feed the result into the organisation’s human-risk picture.
- Branching scenarios with real consequences
- Immediate explanation of why an answer was right or wrong
- 7 measured competencies feeding human-risk insight
- Cyber and responsible-AI risk in one catalogue
You asked the caller to confirm their identity
- What happenedThey answered fluently
- Why it failedSame channel
- What works insteadIndependent callback
- Competency recordedVerified independently
- Retry offeredYes
- Time to here4 minutes
The worst outcome loops back to the decision, so the consequence teaches rather than punishes.
- Modules available today
- 5
- Measured competencies
- 7
- Industry variants
- 9
- Role variants
- 20
The catalogue
What you can assign today, and what is coming.
We would rather publish a small honest number than a large one that includes modules nobody has written yet.
Available now — 5 modules
LiveCyber Basics for Staff
8 lessons · 20 min · 3 knowledge checks · 10-question quiz at 80%
Business Email Compromise Prevention
7 lessons · 25 min · 2 knowledge checks · 9-question quiz at 80%
Cyber Literacy for Managers
7 lessons · 25 min · 2 knowledge checks · 9-question quiz at 80%
Safe AI Use at Work
7 lessons · 20 min · 2 knowledge checks · 8-question quiz at 80%
Community Scam Safety
7 lessons · 20 min · 2 knowledge checks · 8-question quiz at 80%
Lesson-and-quiz modules with a pass mark and a verifiable certificate — 36 lessons and 11 interactive knowledge checks between them, graded server-side.
In development — 0 modules
Not yet availableThe full planned curriculum is 32 scenario modules: 16 covering core cyber behaviour — phishing, business email compromise, passwords and MFA, remote working, ransomware, physical security, incident reporting and backups — and 14 covering AI risk, from approved tools and what may be given to an AI, through hallucination and verification, to deepfakes, prompt injection and AI agents taking automated actions.
The authoring engine, content schema, validation, competency mapping and variant system are all built — the modules themselves are being written. We will move them into the list on the left as they ship, and not before.
84 are already written and pass validation, including the showcase voice-cloning scenario with 9 industry and role variants. They are reviewable by platform administrators but cannot yet be assigned to a learner, so they are counted here rather than on the left.
How the modules are built
Gamified enough to hold attention, professional enough to show a board.
The design constraint throughout: anything that would embarrass a business owner watching over an employee’s shoulder does not ship.
Decisions, not page turns
Modules put the learner inside a realistic workplace situation and ask what they would do. Every branch leads somewhere different, including the branches that feel responsible and are not.
Feedback that teaches
Every answer is followed immediately by why it was right or wrong, and what the consequence would have been. Being told "incorrect" and moved along teaches nothing.
Comprehension, not completion
7 named competencies are measured from the decisions a learner makes — recognising warning signs, verifying independently, reporting quickly — rather than from whether they reached the last screen.
Badges earned by behaviour
10 badges, each awarded for demonstrating a competency across modules, completing a pathway or finishing a real workplace action. There is no points total, no streak and no leaderboard — those reward speed, which is the opposite of the habit.
Written for the actual role
Overlays adapt the scenario to 9 industries and 20 workplace roles. A payroll officer at a construction company gets the payroll framing, because that is how they are targeted.
Illustrated, not decorated
17 recurring characters carry the scenarios, drawn in code rather than loaded as heavy assets. Animation is used where it aids understanding and nowhere else.
Pathways and progression
37 pathways assemble the right modules for an induction, an annual refresher, a role, an industry or a specific weakness the platform has observed.
Accessible and responsive
Keyboard navigable, screen-reader labelled, and usable on a phone. Accessibility promises are validated when a module is published, not asserted in a brochure.
The cast
The same people turn up across the scenarios.
Recurring characters make a scenario land faster, because a learner already knows who they are dealing with by the second module. Every figure is drawn in code from the brand palette — original artwork, no stock photography and no image payload.
Alex
Owner and managing director
Maya
Finance and administration
Sam
Frontline and customer service
Jordan
Remote and mobile worker
Priya
Team leader and cyber champion
Morgan
IT provider and technician
Echo
AI assistant
The Impostor
Whoever they need to be
Rhys Mendoza
The Analyst — Cyber Guys incident analyst
Priya Raman
Calder & Rowe practice manager and the learner’s onboarding buddy
Dan Whitlock
Calder & Rowe managing partner
Jess Tran
Calder & Rowe accounts payable
Sam Kelly
Calder & Rowe front desk and reception
Marcus Lee
IT support from the firm’s managed service provider
The Client
A Calder & Rowe client
The Caller
An inbound caller
The Visitor
A visitor at the front door
AI risk
Responsible AI use, treated as a cyber topic.
Staff are already using AI tools. The risk is not that they will — it is that nobody has told them what may be pasted into one, how to check what comes back, or what a cloned voice sounds like.
- What can and cannot be put into an AI tool at work.
- Verifying AI output, and who is responsible when it is wrong.
- AI-generated phishing that has no spelling mistakes in it.
- Deepfakes and voice cloning, taught through a scenario rather than a warning.
- Meeting bots, transcription and where those recordings end up.
- Prompt injection, and AI agents that can take actions on your behalf.
Safe AI Use at Work is available today. The remaining 14-module AI-risk curriculum is in development.
Follow-up training
Training triggered by what actually happened
Training is most useful in the ten minutes after somebody gets something wrong. Cyber Guys assigns it then, automatically, and specific to the technique involved.
- Clicked an invoice-fraud simulation→ Business Email Compromise Prevention
- Approved an unexpected MFA prompt→ Cyber Basics for Staff
- Fell for an AI-generated impersonation→ Safe AI Use at Work
- Assessment gap in a control area→ The module covering that behaviour
Default mappings ship with the platform and can be overridden per organisation.
What comes out
Records, not claims.
- A verifiable completion certificate, checkable online by anyone with the code.
- A pass mark that means something — quizzes are graded server-side.
- A competency profile showing which behaviours were demonstrated, and where.
- Group completion reporting for the organisation, and per-client for an MSP.
- Assignment, due dates and reminders, so chasing is not a manual job.
Where training results go
Competency results and completions feed the organisation’s human-risk view alongside simulation and assessment results — so the picture is “this team consistently does not verify payment changes”, not “Dave is risky”.
The scoring engine and its fairness constraints are built and tested. Tenant-facing human-risk reporting is in development.
Sit a module yourself.
We will put you through the voice-cloning scenario in the demo. It takes four minutes and most people get the first decision wrong.