Can I buy courses individually?
Yes — Detect, Direct, and Connect can be purchased in any combination. Each is priced per seat, and your pricing band is determined by total seats across all courses.
What's the difference between the courses?
Detect is for staff with corporate email and web access — phishing, passwords and safe working. Direct is for managers — it teaches them how to create and sustain a cyber-secure culture, covering policy, legal obligations and incident response. Connect is for non-desk staff who don't have a corporate email account or general web access — for example nursery, warehouse, retail, driving and care staff — delivered without email or passwords using QR codes or short codes for login.
Can managers do both Detect and Direct?
Yes, and we strongly recommend it. Managers need Detect to understand what their staff are being taught and to lead by example. Direct then builds on that with the additional responsibilities of a manager — policy, culture and incident response. You'll need one Detect seat and one Direct seat per manager.
Do IT staff need to take Detect?
It's not assumed that IT staff need the Detect course — they typically already understand the technical threats. However, IT staff are still part of your organisation's culture, and Detect helps them understand the human side of security that their colleagues are experiencing. If you want IT staff to participate in phishing simulations, they would also benefit from Detect.
How does phishing simulation work?
Once activated, we automatically send one realistic phishing email per targeted staff member per month (or fortnightly). Anyone who clicks receives an immediate, supportive awareness page. You see anonymised stats — no individual names shown.
What is the bundle discount?
When you purchase phishing simulation alongside training in the same order, phishing is discounted by 20%. If you buy phishing on its own, a standalone rate applies instead.
Do I need to set up anything technical?
For training — nothing. For phishing simulation — you'll need to whitelist our sending IP address in your email system. We guide you through this step-by-step after sign-up, with instructions for Microsoft 365 and Google Workspace.
Is this GDPR compliant?
Yes. We act as a data processor on your behalf. Our Data Processing Agreement (BC-DPA-001) governs how we handle employee data. Staff data is never used for any purpose other than delivering the service.
What happens if I need more seats mid-year?
You can top up at any time. Additional seats are pro-rated to the remaining subscription period.
