Cybersecurity professional services

The platform is the starting point. Professional services run with scope and a report: they are not native modules. They cover smishing, vishing, USB, tabletop, and custom content. Recurring support is compared on Plans.

View available services

Professional services

Mature programs, advanced demands

For organizations with active programs that need more complex scenarios, personalization, or impact.

Advanced vectors: vishing, deepfakes, USB Drop, or custom 2FA attacks.

Crisis simulations designed for the organization's industry and operational context.

Content built from scratch with internal identity, culture, and language.

Custom executive dashboards on real program data.

High-impact services to scale the program

Each service has its own page: the attack, how we run it, what you receive and what we need from your team.

Advanced attacks

Professional smishing

We run simulated SMS attacks to the personal phone, outside the perimeter your mail filter can see.

Professional vishing

Calls with a script, an actor and a credible pretext: the channel with the highest real-world success rate.

On-site USB drop

The only physical vector: test devices in a plant, branch or warehouse, with a location and area report.

2FA attacks

We test whether the second factor holds up against an intermediary. Having MFA is not the same as being covered.

Deepfake and AI fraud

Synthetic video or audio of an executive asking for a transfer. We measure whether anyone verifies before the money moves.

Advanced Attack

A multi-vector campaign — email, phone and physical presence — with a retest. Not a one-shot social pentest.

Training and crisis

Crisis tabletop

The only service aimed at the committee, not the roster. The CISO puts the board in front of an incident at the table.

Cybersecurity talks

Sessions for the team, in person or online, adapted to the industry. Lead time: 3 months in person, 2 months online.

Content and data

Custom templates

Design of a scenario that is not in the platform’s template library. If you send the email to clone, 48 hours. From scratch: 5 or 10 business days.

Branded content

Two pieces a month on your brand manual. Copy in 5 days, final design in 10. If you do not need your own brand, 90 assets are already ready.

Power BI reporting

Dashboards in your BI stack, not another screen. We join program data to the sources the committee already reads.

Boost your risk management

From definition to action

We understand
the context

Industry, countries, program maturity, priority risks, and internal audiences.

We design
the approach

Campaigns, content, reports, or simulations based on the security team's objective.

We execute
what's needed

We activate professional services aligned to the platform and the operational calendar.

We measure
and adjust

We review results, learnings, and next steps to sustain program improvement.

We understand
the context

Industry, countries, program maturity, priority risks, and internal audiences.

We design
the approach

Campaigns, content, reports, or simulations based on the security team's objective.

We execute
what's needed

We activate professional services aligned to the platform and the operational calendar.

We measure
and adjust

We review results, learnings, and next steps to sustain program improvement.

We understand
the context

Industry, countries, program maturity, priority risks, and internal audiences.

We design
the approach

Campaigns, content, reports, or simulations based on the security team's objective.

We execute
what's needed

We activate professional services aligned to the platform and the operational calendar.

We measure
and adjust

We review results, learnings, and next steps to sustain program improvement.

Service plans

Support for every stage

Smart, Growth, and Enterprise define recurring support. The full comparison — what each tier includes — lives on Plans.

Smart

For teams launching their program who need to organize campaigns, training, and first reports.

See details

Growth

For organizations already working on awareness that want to add analytics, automation, and more realistic multichannel simulations for enterprises.

See details

Enterprise

For companies with regional operations, compliance requirements, and ongoing strategic support.

See details

Service plans

Services

The platform is the starting point. Services cover what the product does not do alone.

There is a managed layer, there are professional services, and there is custom content. They are not three names for the same retainership. Each one is quoted separately.

The platform lets you start, measure, and scale the program. Many teams do not want to operate campaigns, courses, and reports without an analyst beside them. That is where the plans’ service layer comes in: assigned account, annual program, follow-up. That is not a custom project. It is recurring operations. If what you need is a deepfake, a crisis tabletop, or a dashboard that is not the native one, that is no longer the managed layer. It is a professional service with scope.

Professional services exist for depth: advanced attacks, talks, custom reports, content with its own identity, crisis simulations, expert support. They are designed around industry, language, and risk. They are not sold as a “plan bonus” if the contract does not include them. The catalog lists capabilities. The number of assets or exercises, when it exists, is in the plans table or in the proposal.

Custom content is the third axis: assets, newsletters, scenarios, and tone that do not come from the catalog. It helps when the roster does not recognize the global pack — a bank that already lived that — or when internal brand is part of the control. It is not a loose creative studio. It is tied to the program: the asset has to be triggerable and measurable. If you only need a single hygiene video, simpler vendors exist. If you need the asset to live in the index, this is the table.

Three layers

Managed, professional, and content — do not mix the invoices

Asking for all three under the same name is how a scope breaks.

Managed layer

Analyst, program build, follow-up cadence, operation of courses and campaigns within what the plan includes. It is recurrence, not a project. It is tied to Smart, Growth, or Enterprise. What enters…

Professional services

Bounded scope: an advanced exercise, a talk, a tabletop, a dashboard, a scenario design the product does not fire alone. It has a start and a delivery. It is not sold as “loose hours.” It is quoted…

Custom content

Assets, newsletters, videos, and scenarios with that organization’s identity, language, and risk. The goal is adoption, not a brand book. It is measured in the program. It is not a stock of a hundred…

Questions about services

How is managed service different from a professional one?

Managed is the recurring operation of the program inside the plan. Professional is a bounded scope: an exercise, a talk, a deliverable. Mixing them is how “wasn’t this included?” appears. Plans shows the layer. Services details the depth catalog. The proposal writes the two lines separately.

Does a talk or an advanced attack come in the plan?

When the plan table includes it, yes, with the quota that table states. When it does not, they are quoted. Do not assume Enterprise includes the whole professional catalog. Read the row. Ask in the demo.

Does custom content replace the module catalog?

It complements it. The module still assigns by behavior. The custom asset enters that engine. If you only produce a video and send it by internal email, you are not using the product. The value is that the asset can be triggered, measured, and audited.

Is there a reference price?

We do not publish them. It depends on scope, assets, and whether it travels with a plan. The commercial conversation quotes. Use contact or the demo with a professional-services reason.