Pricing

One price per person, lower as you grow

Practice emails, the report button in Outlook, mini-lessons and every training module are all included. No quote, no sales call, and you can cancel monthly.

One package

From the first practice email to proof of training for your insurer or auditor. One platform, one price.

No required annual contract, no credit card needed. Everything below is included, even for a team of five.

£46/mo

12 users · £3.85 per user / month, excl. VAT

Start with your team ↗
Every plan includes
  • Practice emails and spear phishing
  • Report button for Outlook
  • Mini-lessons after a report
  • Gamified training modules
  • Reports and insights
  • scamcanary AI
  • Certificate and reporting
It gets cheaper as you grow
Team sizePer user / month, excl. VAT
1–4£16 for the whole team
5–24£3.85
25–49£3.45
50–99£3.05
100–249£2.55
250–499£2.15
500–999£1.80
1,000+£1.45

All prices exclude VAT. No quote. No sales call. No obligated annual contracts.

25+ people, annual contract

25+ people? Your customisation is free.

Customisation normally comes with a small quote. With 25 or more people on an annual contract, we build it at no extra cost.

  • A module on your own procedures
  • Practice emails with your own systems and suppliers
  • A country or language we don’t have yet
Ask for an annual offer
Multiple companies

Several companies, one subscription.

Run more than one business? Put them all in one account and switch between them in the dashboard.

  • The price per person is set by all your people together
  • Someone who works for several companies counts once
  • Each company gets its own invoice, so it can reclaim the VAT
  • One overview with all your companies side by side
Start free
Everything included

Everything below comes in the one price

No add-ons and no modules to buy one by one. This is all live today.

Practise

  • Five levels of practice emailFrom an obvious fake to a colleague's email thread, on a domain one letter off yours.
  • Your own brands and colleaguesPractice emails use the brands and tools your team really works with, and real colleagues' names.
  • QR-code emailsLike the real QR scams: scanning the code counts as a click.
  • Practice sign-in pagesOptional. A fake login page after the click; nothing anyone types ever leaves their browser.
  • Within your working hoursEveryone gets their emails at their own random moment, on your working days and hours.

Report

  • Report a Canary in OutlookOne click. A practice email moves to a Reported folder, with what gave it away.
  • Or forward itNo button? Forwarding a suspicious email to the report address counts the same.
  • A quick check of real emailsPrivate to the reporter, who decides whether to send it to the admins.
  • Warn the teamConfirmed phishing? Warn everyone about that one email in a single step.
  • The reporter hears the verdictOnce an admin decides, the person who reported it gets a short email.

Learn

  • Modules from A to ZFrom passwords to ransomware: real situations where you make the call.
  • A training planModules handed out one at a time, with due dates and reminder emails.
  • Mini-lessons after a reportA drawn situation and one question, done in half a minute.
  • Scam of the monthOne real scam from the news each month, told as a short story.
  • Points, levels and a weekly gamePoints for reporting and learning. Clicks never count against anyone.

Prove and manage

  • Reports and insightsPer department or per person, summed up by scamcanary AI, and a summary email every month.
  • Before and after each moduleHow often people clicked that kind of email before and after finishing its module.
  • Audit packEvidence mapped to NIS2 and ISO 27001, printable for your auditor or insurer.
  • Policy sign-offEveryone accepts your policy PDF, and you keep the record.
  • Microsoft 365 syncNew colleagues invited and leavers paused, every day, by themselves.

Frequently asked questions

Do employees have to consent?

Yes. scamcanary only sends a practice email once someone has accepted the invitation themselves, and stops the moment they withdraw. The invitation also shows what the company can see about them. The organisation doing the training makes sure it has a lawful basis and tells its people beforehand why and how they will practise.

What is spear phishing, and do you really do it?

Spear phishing is phishing aimed at one company or person, with real names and a believable story. Our levels 3 to 5 do exactly that, using the names of colleagues who take part themselves and a copy of your company’s domain.

What happens when someone clicks?

Nothing bad. They see straight away what it was and how they could have spotted it. We never rank anyone for clicking.

Which countries and languages do you support?

The Netherlands and the United Kingdom today, in Dutch and English. Other countries and languages are possible on request: let us know and we’ll work it out as soon as we can.

Can you build something custom?

Yes. We adapt modules and practice emails to your sector or procedures, or build something new, for a small quote. With 25 or more people on an annual contract, it is free.

I run several companies. Do I need a subscription for each?

No. Add them all to one account: the price per person is set by all your people together, someone who works for several companies counts once, and each company still gets its own invoice so it can reclaim the VAT.

Am I tied in?

No. There is no required annual contract and you don’t need a credit card to start.

Practice is the best defence.

Start with your team today. The first round is ready within minutes.

Start free

One platform, one price. No required annual contract, no credit card needed.

* The first 14 days are free. After that your subscription starts automatically, at the price for your team size. Cancel free of charge up to and including day 14.