MD
Mark Davies · Financemark.davies@To: Sarah Collins
Q3 payroll summary shared with you
Hi Sarah,
here’s the Q3 payroll summary we talked about.
to open the file.
Payroll summary Q3.xlsxSharePoint · Northfield Accountants
OpenThanks, Mark
Security awareness training for every organisation
scamcanary trains your whole team against scams: practice emails that look like your own bank and your own colleagues, training modules from A to Z, one-click reporting in Outlook and a weekly game. You see who needs what, and you have the proof ready for your auditor or insurer.
Try it yourself
Would you have reported this one?
Find the 3 signs0 of 3
Click on whatever doesn’t add up in the email. Or press Report a Canary straight away.
✓ Thank you. Your report has been received.
How it works
From practice email to proof, in four steps.
Your team gets realistic practice emails. Anyone who spots one reports it with one button in Outlook and sees straight away what gave it away. Modules from A to Z teach the rest, and you see, per department, how often your team reports instead of clicks.
What the film shows
- Practise: Practice emails that look like real attacks
- Five levels, from obviously fake to spear phishing with real colleagues
- Thirteen kinds of scam, with the brands and tools your team really uses. You choose which
- Within your own working hours, and not on bank holidays unless you choose otherwise
- Report: One button in Outlook, and a lesson straight away
- A caught practice email is explained, sign by sign
- Points and a leaderboard for reporting, never for clicking
- A real suspicious email gets a private quick check
- Learn: Gamified cyber and data security modules
- You live through a situation and make the call yourself
- Short, in order, and worth points
- From A to Z, and the library keeps growing
- Measure: Reports and insights, with scamcanary AI
- See what works and where your team is still vulnerable
- scamcanary AI summarises and advises
- Certificate and report for your audit or insurer
Why scamcanary
Serious security training, without the corporate hassle
From a team of one to thousands of people. Most tools start with a demo, then a quote, then a contract that often runs for years. We did it the other way round.
PriceThe usual way: Only after a demo and a quotescamcanary: Right here on the site. Start today.
ContractThe usual way: Often yearly, with a minimum number of seatsscamcanary: Cancel monthly, from 1 person
Practice emailsThe usual way: Generic templatesscamcanary: Look like your own bank, courier and colleagues
LearningThe usual way: A yearly video that nobody finishesscamcanary: Short lessons at the right moment, and a weekly game
Follow-upThe usual way: A list of who clicked, and then what?scamcanary: See per team or per person who needs what, and which module comes next
Your timeThe usual way: A project for ITscamcanary: Set it up once, then it runs by itself
Everything included
One platform, one price, everything in
No add-ons and no modules to buy one by one. This is what every team gets.
01 · Practise
Realistic phishing simulations
Practice emails that look like what your team really receives: from your bank and your courier to your own colleagues. Unsure? One click on Report a Canary in Outlook shows straight away what gave it away.
- Five levels of realismFrom an obvious fake to an email from a colleague, on a domain that looks like yours.
- Report a Canary in OutlookReport with one click. A practice email moves to a Reported folder, with the explanation next to it.
- You decide everythingTopics, levels, how often, and on which days and hours. All from one dashboard.
You set the rhythm
Choose how often practice emails go out and how hard they get, from obviously fake to your own colleague. Everyone gets their own random moment within your working hours, so nobody can warn the rest.
02 · Insight
Know where the risk is
A dedicated insights page, per department or, if you choose, per employee. With a risk level, the reasons behind it and the module that helps most right now.
- Risk per department or per personLow, medium or high, always with the reasons. You choose how detailed.
- scamcanary AISums up your numbers in plain words, warns you where things go wrong and recommends the next module.
- Report and certificatePrintable per period, ready for your client, insurer or auditor.
scamcanary AI sums it up
Your numbers in plain words: what stands out, where things go wrong and which module helps most next. It only ever sees totals, never a judgement about one person.
03 · Learn and play
Training they actually remember
Modules that cover cyber and data security from A to Z, mini-lessons after a report, a weekly minigame and a leaderboard. That is how it sticks, and how it becomes something your team wants to do.
- Modules from A to ZCyber and data security: passwords, MFA, phone scams, AI tools, GDPR and more, with real situations to practise in.
- Mini-lessons after a reportNow and then a report is followed by a quick question in the report window, so it stays fresh.
- A minigame every weekOn the site, full of phishing, cyber and data security questions. Right answers mean power-ups.
- Levels and a leaderboardXP for reporting, lessons and games. Every season a new shot at first place.
A season to play for
Points for reporting, modules and the weekly game, on a leaderboard that starts fresh every season. Clicking a practice email never costs anyone a place.
Five levels
From obviously fake to an email from your own colleague.
Everyone gets a random mix of every level. The top three are spear phishing: aimed at your company, your role and your colleagues. Exactly how real attackers work.
The brands in these examples are made up for this page. Your team's practice emails use the real brands and tools you work with: your own bank, courier and software.
- Real colleagues’ names, job titles and departments
- A copied domain that is one letter off
- Shared files, invoices and email threads already in progress
Only colleagues who take part in the training themselves appear in practice emails. Nobody gets a practice email without consent.
For the owner
Show that your team is trained
Clients, insurers and the EU's NIS2 Directive increasingly ask for proof that your people know what to do. scamcanary keeps that proof for you.
Read about NIS2- A training certificate for your company
- A printable report per period
- Results per department and per level
- Which modules each person has finished
scamcanary does not make you NIS2-compliant on its own: the law asks for more than training. We take care of the training, and the proof that it happens.
Everything included
Everything below comes in the one price
No add-ons and no modules to buy one by one. This is all live today.
Practise
- Five levels of practice emailFrom an obvious fake to a colleague's email thread, on a domain one letter off yours.
- Your own brands and colleaguesPractice emails use the brands and tools your team really works with, and real colleagues' names.
- QR-code emailsLike the real QR scams: scanning the code counts as a click.
- Practice sign-in pagesOptional. A fake login page after the click; nothing anyone types ever leaves their browser.
- Within your working hoursEveryone gets their emails at their own random moment, on your working days and hours.
Report
- Report a Canary in OutlookOne click. A practice email moves to a Reported folder, with what gave it away.
- Or forward itNo button? Forwarding a suspicious email to the report address counts the same.
- A quick check of real emailsPrivate to the reporter, who decides whether to send it to the admins.
- Warn the teamConfirmed phishing? Warn everyone about that one email in a single step.
- The reporter hears the verdictOnce an admin decides, the person who reported it gets a short email.
Learn
- Modules from A to ZFrom passwords to ransomware: real situations where you make the call.
- A training planModules handed out one at a time, with due dates and reminder emails.
- Mini-lessons after a reportA drawn situation and one question, done in half a minute.
- Scam of the monthOne real scam from the news each month, told as a short story.
- Points, levels and a weekly gamePoints for reporting and learning. Clicks never count against anyone.
Prove and manage
- Reports and insightsPer department or per person, summed up by scamcanary AI, and a summary email every month.
- Before and after each moduleHow often people clicked that kind of email before and after finishing its module.
- Audit packEvidence mapped to NIS2 and ISO 27001, printable for your auditor or insurer.
- Policy sign-offEveryone accepts your policy PDF, and you keep the record.
- Microsoft 365 syncNew colleagues invited and leavers paused, every day, by themselves.
One package
From the first practice email to proof of training for your insurer or auditor. One platform, one price.
No required annual contract, no credit card needed. Everything below is included, even for a team of five.
Every plan includes
- Practice emails and spear phishing
- Report button for Outlook
- Mini-lessons after a report
- Gamified training modules
- Reports and insights
- scamcanary AI
- Certificate and reporting
It gets cheaper as you grow
| Team size | Per user / month, excl. VAT |
|---|---|
| 1–4 | £16 for the whole team |
| 5–24 | £3.85 |
| 25–49 | £3.45 |
| 50–99 | £3.05 |
| 100–249 | £2.55 |
| 250–499 | £2.15 |
| 500–999 | £1.80 |
| 1,000+ | £1.45 |
All prices exclude VAT. No quote. No sales call. No obligated annual contracts.
25+ people? Your customisation is free.
Customisation normally comes with a small quote. With 25 or more people on an annual contract, we build it at no extra cost.
- A module on your own procedures
- Practice emails with your own systems and suppliers
- A country or language we don’t have yet
Several companies, one subscription.
Run more than one business? Put them all in one account and switch between them in the dashboard.
- The price per person is set by all your people together
- Someone who works for several companies counts once
- Each company gets its own invoice, so it can reclaim the VAT
- One overview with all your companies side by side
Every country, every language
A practice emailEN in your language, with your brands.
scamcanary works in the Netherlands and the United Kingdom today, with that country’s brands, holidays and rules. Other countries and languages are possible on request, and we are working on the next ones.
Available now
United Kingdom · EnglishNederland · Nederlands
On request, and in development
DeutschFrançaisEspañolItalianoPolskiYour language?
Is your country or language not there?
Let us know. We’ll work it out as soon as we can, with your country’s brands and rules.
Get in touchFrequently asked questions
Do employees have to consent?
Yes. scamcanary only sends a practice email once someone has accepted the invitation themselves, and stops the moment they withdraw. The invitation also shows what the company can see about them. The organisation doing the training makes sure it has a lawful basis and tells its people beforehand why and how they will practise.
What is spear phishing, and do you really do it?
Spear phishing is phishing aimed at one company or person, with real names and a believable story. Our levels 3 to 5 do exactly that, using the names of colleagues who take part themselves and a copy of your company’s domain.
What happens when someone clicks?
Nothing bad. They see straight away what it was and how they could have spotted it. We never rank anyone for clicking.
Which countries and languages do you support?
The Netherlands and the United Kingdom today, in Dutch and English. Other countries and languages are possible on request: let us know and we’ll work it out as soon as we can.
Can you build something custom?
Yes. We adapt modules and practice emails to your sector or procedures, or build something new, for a small quote. With 25 or more people on an annual contract, it is free.
I run several companies. Do I need a subscription for each?
No. Add them all to one account: the price per person is set by all your people together, someone who works for several companies counts once, and each company still gets its own invoice so it can reclaim the VAT.
Am I tied in?
No. There is no required annual contract and you don’t need a credit card to start.
Who in your team reports the first one?
You are set up in a few minutes. Invite your team, and the first practice email goes out as soon as they have said yes.
- From 1 person
- Cancel monthly
- No credit card needed
After 14 days your subscription starts automatically, at the price for your team size. Cancel free of charge up to and including day 14.
Rather talk first? Contact the founders →