Filters stop most of it.Your team stops the rest.
Conbool Awareness rehearses the real thing before it happens: phishing simulations built from real attacks, playable lessons with Bo and evidence that stands up to an audit.
Dear Sir or Madam,
please confirm your details today, otherwise the transaction will be cancelled.
I am Bo. Three things about this email are wrong. Tap them.
31
Lessons
7
Seasons
3
Levels per lesson
3 to 5
Minutes per episode
The remaining gap
One click is enough
Technical defences catch the bulk of it. What gets through is the well made attempt, and it lands with a person who is under time pressure.
What technology handles
MailGuard reliably removes mass waves, known senders and malicious attachments before they reach a mailbox.
What is left
Targeted messages with no attachment and no known signature. They look like ordinary work and are addressed to one specific person.
What it consists of
What Awareness covers
Practise, explain, repeat, prove.
Phishing simulation
Realistic test messages to selected groups, evaluated without singling anyone out.
- Audience freely chosen per round
- Sending spread across days, not bundled
- Evaluation by group, not by person
Training you play
No slides. Every lesson is a short episode from a working day: check a message, sort cases, decide under time pressure. Bo, the owl, guides through it and explains every find.
- 31 lessons in seven seasons, three levels each
- One move right after the click, a refresher later
- German and English, with your own domain in the text
Programmes
A plan across several months instead of a one off campaign. Set it up once and it keeps running.
- A plan across several months
- Set it up once and it keeps running
- Rounds can be adjusted without rebuilding
Reporting
One button in Outlook and Thunderbird. Every report lands in a work list, your own simulations are recognised automatically.
- Report button in the mail client
- Work list with the verdict of the gateway
- Report rate as the key figure
Reports
Progress per department and per period, as evidence for auditors and management.
- Progress per department and period
- Separate for employees and management
- Export for audit and internal review
Capabilities
What makes a programme hold up.
Six points that separate effect from activity.
Built from real attacks
With the Conbool gateway, attacks that actually reached your company become defused templates. You practise what really arrives.
Spread over time
Sending across days so the simulation does not announce itself.
Group level evaluation
Results per department, with no ranking of individual employees.
Evidence that satisfies an audit
Reports show content, periods and the development across rounds. An attendance list cannot, and that is exactly what an audit asks for.
Agreement with the works council
Limiting evaluation to groups removes the hardest point from that discussion.
Operated in Germany or on your premises
Either from German data centres or entirely inside your own environment, training content included.
How it runs
One programme, four steps
Effect comes from repetition, not from the one big training session each year.
Choose the audience
You decide who takes part. Departments, groups or the whole company.
Simulation runs
Test messages go out spread over time so they are not recognised as a campaign.
Training follows
Anyone who reacted gets a short explanation of that exact technique.
Next round
The programme repeats and the report shows how things develop over time.
Evidence
Training you can prove
NIS2 requires cyber hygiene and security training in Article 21 paragraph 2 point g. What is required is not only running it, but being able to show it.
- Participation and progress traceable per person and per department.
- Reports across any period, exportable for audit and internal review.
- Evaluation at group level so nobody is put on the spot.
- Operated in Germany or entirely in your own data centre.
The difference
The message that gets through the filter
What happens next decides the damage.
With an annual briefing
- The session was in January, the message arrives in September.
- Nobody knows how staff would actually react.
- Whoever falls for it would rather not report it.
- The auditor is handed an attendance list.
With an awareness programme
- Practised across the year, so the attention holds.
- The reaction is measured, in daily work rather than a training room.
- A reaction is met with an explanation, not a report to management.
- The auditor is handed content, periods and a development over time.
How to start
Into the programme in three steps
From the first agreement to the first report, without your own project team.
Agree the audience
You decide who takes part and involve the works council. Group level evaluation removes the hardest point from that conversation.
Set up the programme
We configure the first round together, with schedule, techniques and training units.
Review the result
After the first round you see the report and decide how to continue. From then on it runs by itself.
A first round is set up within days. The development becomes meaningful from the second round, which is why a programme spans months.
Frequently asked questions
Does the simulation expose individual employees?
No. Evaluation is designed around groups. Anyone who reacts to a simulation gets an explanation, not a report to their manager.
How often should we simulate?
Effect comes from repetition spread across the year. A programme with several rounds achieves far more than a single campaign.
Does the works council need to be involved?
Usually yes, as soon as behaviour is evaluated. Group level evaluation exists for exactly that reason and makes the agreement easier.
Does it work without MailGuard?
Yes. Awareness can be used on its own. Together with MailGuard the effect is stronger, because technology and people are prepared for the same techniques.
Which plan includes Awareness?
Awareness is part of the largest plan. It can also be booked separately where that fits better.
Is there a report button for Outlook and Thunderbird?
Yes. With the Conbool Awareness add-in, employees report suspicious messages with one click, in Outlook classic, new and web and in Thunderbird 128 or later. Reports on simulations are included in the evaluation.
How long does a lesson take?
An episode takes three to five minutes depending on the level. The move after a click and the refresher take about one minute. The figures are measured, not estimated.
Who is Bo?
Bo is the owl that guides through every lesson. Bo is pleased about a find, explains a slip and never judges the person in front of the screen.
Related pages
More on training and phishing.
NIS2 im Überblick
Richtlinie, Umsetzungsgesetz und Pflichten: wer betroffen ist und was gilt.
Learn moreSecurity Awareness Training
Schulung, die sich gegenüber einer Prüfung belegen lässt.
Learn morePhishing-Simulation
Den Ernstfall üben, ohne Einzelne vorzuführen.
Learn moreNIS2-Schulungspflicht
Was die Richtlinie für Beschäftigte und Geschäftsleitung konkret verlangt.
Learn morePhishing-Schutz
Die technische Abwehr, bevor eine Nachricht den Menschen erreicht.
Learn moreNIS-2 E-Mail-Sicherheit
Alle E-Mail-Anforderungen aus Art. 21 NIS2 im Überblick.
Learn moreRehearse the real thing before it happens
We set up the first programme with you and go through the results together after the first round.