Service
The employee is the first layer of defence.
Falcon Academy: awareness and phishing simulation for employees, pentest and incident response sessions for the technical team.
- Awareness
- Phishing simulation
- Technical team
- Corporate

Why it matters
The problem
Many incidents start with one e-mail. Antivirus does not see it; an employee has to. Awareness is not a one-off lecture but a measurable process.
Our answer
For the technical team, hands-on sessions: in their own infrastructure, with their own tools.
What is included
06 modulesCorporate training
- Awareness
- Phishing simulation
- Technical team
- Corporate
- 01

Awareness program
Phishing, BEC, password hygiene, social engineering: short and practical.
- 02

Phishing simulation
E-mails that mimic real schemes; who clicked, who reported, in numbers.
- 03

Technical sessions
Pentest, incident response, SOC: Academy programs in a corporate format.
- 04

In your environment
Examples from your systems; the result goes back to the workplace.
- 05

Measurement
Simulation results over time; a report for management.
- 06

Certificate
For participants, with the topics covered.
How it goes
04 steps
- 01
Diagnostics
The level of staff and team is established; a first simulation.
- 02
Program
Built from the results.
- 03
Sessions
Awareness sessions and technical labs.
- 04
Measurement
A repeat simulation and a report.
What you get
- 01
Results in numbers
Simulation metrics before and after.
- 02
Materials
Reminders for staff, a lab for the technical team.
- 03
Certificates
For participants.
Questions
All servicesFor how many employees?
No limit; awareness runs online and offline, in groups.
Won’t the simulation upset staff?
The goal is to teach, not to punish. Results are discussed in aggregate, not personally.
In which language?
Uzbek or Russian.
How often?
Awareness at least twice a year; simulation quarterly.
Let’s start
Start with a free external check
Give us your domain and we return a first report on your external attack surface and leaked accounts. Nothing is installed, nothing is blocked; the scope is agreed based on the result.
- Subdomains, open ports and expired certificates
- Corporate accounts found in breaches
- The three most important issues and where to start