Start a formal awareness program without a dedicated operator
Smart is the tier for organizations that already decided an annual course does not manage risk, but still have no one whose job is to build campaigns, assign courses and sit in a follow-up meeting. You get the full platform. You get an account analyst. You get the annual plan. You do not get simulations built to look like your real operation: that is Growth.
What a year looks like on Smart
A contact is named, the directory is connected read-only, and sending is enabled. The analyst gathers industry, languages, and what audit expects to see. Without a roster there is no first campaign. That stretch of calendar is confirmed at kickoff.
The analyst proposes a year of catalog campaigns, courses, and review points. You validate priorities and windows that stay off-limits —close, holidays, an active incident—. The plan is written down. It is not a marketing roadmap: it is program operations.
Catalog simulations and assignments go out. The goal of the first stretch is not to inflate a click rate: it is to prove mail arrives, the roster is complete, and reinforcement fires. The Agent starts to have signal. The contact gets notice before each send when that is the account rule.
The analyst runs the calendar: joins and leaves already flowing from the directory, resends, courses the plan already includes. They do not invent a new course without notice. If the roster truly changes —a merger, a new country— the client must give explicit notice so scope can be recalibrated.
What you get: platform, service and content
Platform
You get the full product: catalog simulations, training, analytics, the agent, and integrations. No endpoint agent. The roster syncs from the directory. The index and native reports are available…
Service
An assigned account analyst builds the annual plan, operates catalog courses and campaigns, and holds periodic follow-up. They do not replace the CISO. They operate the program with you. Follow-up…
Content
Catalog courses and campaigns, localized so a LATAM roster recognizes them. The analyst picks template and window when the account authorizes it, always with notice to the contact. There are no…
If nobody on the team runs awareness as their job
Smart is for organizations moving from an informal program —a course, a
The typical symptom looks like this: security knows the human factor is the vector the perimeter does not close, People does not have hours to become a campaign operator, and no one in the room owns…
It also fits teams that already bought the idea of Human Risk
You do not need an awareness team. You need a client-side contact —security, IT, or People— who validates roster decisions and attends follow-up. The rest of program operations, within what Smart…
It is not the plan if what you want is a lure that looks like your
That customization is Growth. It is also not the plan if you need branded design, an Advanced Attack, or talks: those live in Enterprise or as a professional service. Smart is the operating floor. If…
What Smart does not include
What you get: platform, service and content
Platform Service Content
What Smart does not include
Smart does not include custom phishing simulations. The catalog covers a first formal program; it does not rewrite the email to look like your payroll, your… It also does not include branded design, Advanced Attack with retest, or cybersecurity talks. That is not a hidden gap: it is the Enterprise quota and, beyond…
What it looks like when the first program becomes measurable
A logistics operator with more than a thousand employees had awareness in internal email and no way to see who read, who fell, and what evolved. The perimeter was cared for; the human factor was not measured. The first…
Questions about Smart
Is Smart the floor you need?
In one conversation we look at roster, who the contact will be, and whether year one lives in the catalog or already needs custom.