Security awareness training for SMEs

Security awareness training your team keeps coming back to.

CyberPulse is a year-long awareness programme: one ongoing story over 52 weeks. Every week your team reads a new chapter and takes two short quizzes, about ten minutes in all. Over four seasons, employees follow how Cipher attacks the fictional company Novento Groep, with tricks that could just as easily reach your organisation.

Phishing, ClickFix and the law in numbers

Attacks come in through people. Phishing and spoofing were the most common incidents Statistics Netherlands asked Dutch businesses about for 2024. With ClickFix, the employee even runs the attack themselves.

  • 23% of Dutch businesses with two or more employees dealt with phishing or spoofing in 2024. For 50 to 250 employees it was 44%. (Source: Statistics Netherlands (CBS), 2025)
  • 62% of breaches involved the human element, such as a click on a phishing email or a mistake. (Source: Verizon, DBIR 2026)
  • 1.1M devices on which Microsoft saw a ClickFix command run between February and early May 2026: roughly an eightfold increase. (Source: Microsoft, Digital Defense Report 2026)
  • 8,000+ organisations have fallen under the Dutch Cybersecurity Act since 15 August 2026. Their board members must take suitable training themselves. (Source: Dutch government, July 2026)

If your customer falls under the Dutch Cybersecurity Act, it can ask the same of you as a supplier. Read what the Act requires

What's included

  • A new chapter of the story and two short quizzes every week.
  • Phishing simulations. Reporting a simulation earns points; clicking one brings a short explanation of exactly that trick.
  • A breach check that shows which business email addresses circulate in data breaches.
  • As an admin you see who takes part and who falls behind, and you pull the report for an auditor or the board with one click.
  • Pulse, a browser extension that stops ClickFix and clipboard fraud. Included in the subscription and rolled out by IT.
  • For MSPs and IT partners: the platform with your own logo, colours and web address.

What it costs

One plan with everything included. You pay per employee per month, in bands: the first 25 employees cost the top rate, the next 25 the rate below it, and so on. Prices exclude VAT, with a minimum of 10 employees.

  • 1 to 25 employees: €4.75 per employee per month
  • 26 to 50 employees: €4.15 per employee per month
  • 51 to 100 employees: €3.55 per employee per month
  • 101 to 250 employees: €2.95 per employee per month
  • 251 to 500 employees: €2.35 per employee per month
  • from 501 employees: €1.95 per employee per month

Try CyberPulse free for 14 days · See pricing · Become a partner

Frequently asked questions

Is CyberPulse for organisations or resellers?

Both. Organisations use CyberPulse as a recurring awareness programme. Resellers use it to manage multiple client organisations under their own services.

When do the phishing simulations start?

From season 2, programme week 14. Season 1 builds the foundation first; only then does unannounced practice make sense, otherwise you are testing something people have not learned yet. The platform runs the simulations and links the results to progress, reporting behaviour and the admin reports. You do not have to set up campaigns yourself.

What if an employee joins later in the year?

They simply start at week 1 of the story. CyberPulse uses a personal calendar per employee: everyone completes the full year programme from their own start date, at the same weekly pace. Nobody has to catch up on past weeks, and the leaderboard compares fairly from each person’s own starting week.

Does CyberPulse help with compliance?

Yes. CyberPulse makes awareness demonstrable with progress, reports, certificates, phishing results and breach monitoring. That helps with internal audits, GDPR, ISO 27001 and NIS2 readiness.

What does CyberPulse cost?

You pay per employee per month, in bands: the first 25 cost the top rate, the next 25 the rate below it, and so on. Work it out in the pricing section above. There is one plan with everything in it; only custom branding and the Executive Cyber Kickstart are optional extras. An annual contract is paid monthly and can be cancelled monthly after twelve months. Three years gives 25% off and a price guarantee.

How much admin work does CyberPulse take per month?

Very little. The platform schedules the weeks, sends the reminders and runs the simulations itself from season 2. Employees sign in through SSO or a magic link, so there are no passwords to reset. You add employees, check the dashboard to see who takes part and where the risk sits, and download the report when someone asks for it.

How quickly is my organisation live?

The same day. You request the trial, click the activation link in your email and your organisation is ready. Then you add employees, and everyone starts at week 1 of the story, including anyone who joins later.

Where is our data stored, and do we get a data processing agreement?

On servers in the Netherlands, with encrypted backups in Germany. The one exception is the breach check, which looks the address up with Have I Been Pwned in Australia. We keep the audit log for a year, and at the end of the contract we delete your data or hand it over as an export. A data processing agreement under Article 28 GDPR comes with it: the text is on the site and you request a signed copy from us.

Read more