Cyber security for a small business: where to start
A small business does not need a security department to stop the most common attacks. Eight steps in order, starting with the ones that cost least.
Articles on phishing and employee security
How to spot phishing, text message and phone scams, what to do after a mistake, how to protect your company’s domain and how to train employees.
For managers: security and training
Where to start with company security, how to organise training, check whether the team spots scams and choose a platform.
Security awareness training for small businesses in Europe
Large security awareness platforms are built for companies with security teams. Here is what a small European company needs, and how a smaller provider covers it.
How to train employees to spot scams
Which training actually changes how employees behave, how to plan it in four steps and how to show the result to management.
Phishing test for employees: how to run and assess it
A survey shows what employees know; a phishing test shows what they do when an email looks real. How to run the test fairly and read the results.
How to choose a phishing simulation platform: 10 questions
Ten questions worth asking a vendor before buying a phishing simulation platform, and the signs that a platform will not suit your company.
What is a phishing simulation and how to run your first
A phishing simulation is a safe, realistic fake attack that shows how your team reacts. How it works and how to run your first one.
Allow phishing simulations in Microsoft 365 and Google Workspace
Without this one-off setting, mail filters open simulation links themselves and the report shows clicks nobody made. Steps for Microsoft 365 and Google Workspace.
Email spoofing: how scammers send email in your name
The sender address on an email is as easy to fake as the return address on a letter. How spoofing works, what SPF, DKIM and DMARC stop and what they do not.
What is phishing and how to protect your business
Phishing is the most common way scammers get into businesses. We explain what it is, which forms are most dangerous and how to actually protect yourself.
How to spot a scam
Emails, text messages, phone calls and QR codes: the signs that give a scam away.
How to spot a phishing email: 7 clear warning signs
Scammers keep improving, but phishing emails still leave traces. Here are 7 signs that help you and your team recognise the deception.
CEO fraud and invoice fraud: real examples
One email pretending to be from the CEO can cost thousands. We explain CEO fraud and invoice fraud schemes with real examples.
Smishing (SMS scams): how to spot and avoid them
A text about an "undelivered parcel" or "blocked card" is often a scam. We explain how to spot smishing and how to respond.
Vishing (phone scams): how to spot them
A call supposedly from your bank or "Microsoft support" can be a scam. We explain how vishing works and how to avoid it.
QR code scams (quishing): how to spot them
A QR code on an "invoice" or in a car park can lead to a fake page. We explain quishing and how to protect yourself from it.
Social engineering: how scammers manipulate people
How scammers use trust, urgency and authority to get people to act, and how to recognise these tactics before doing what they ask.
Phishing glossary: 34 terms explained in plain language
From spear phishing and BEC to SPF, DKIM and DMARC: 34 phishing and email security terms, each explained in one or two plain sentences.
If something has already happened
What to do after a click, a leaked password or encrypted files.
What to do if an employee clicked a phishing link
A click is not a catastrophe — what matters is the next few minutes. A clear action plan for the employee and the business.
Data breach: what to do if your password was leaked
How to check whether your email address appeared in a data breach, what to change first and how to limit the damage.
Ransomware: how to protect your business
Ransomware encrypts a company’s data and demands a ransom. We show how it spreads and how to actually protect yourself.
Everyday protection
Passwords, two-factor authentication and working safely away from the office.
How to create a strong password and manage it safely
Weak and reused passwords are the most common way in. We show how to create and manage strong passwords.
Two-factor authentication (2FA): what it is and why it matters
2FA protects an account even when the password is stolen. We explain how it works and why it should be on everywhere that matters.
Secure remote work and public WiFi
Cafe WiFi, a personal device and a home network are new attack points. We show how to work remotely, securely.
From theory to practice
A phishing simulation lets your employees practise: they get a realistic email and, if they click, a short lesson straight away. Create an account and see sample data straight away.