Audit & Awareness

Training that halves click rates.

Phishing simulations and short, everyday training instead of mandatory annual e-learning exercises. Measurable behavior change in under 6 months with microlearnings that employees actually use and dashboards that your Executive Management understands.

Adaptive phishing simulations · 5-min microlearnings · 12+ languages

At a glance

−50%
Click rate in under 6 months
5 mins
per microlearning module
10+ languages
Employees learn in their native language
GDPR
-compliant, suitable for works councils

100.000+ mitigated cyber incidents

  • SecuriTy Made in Germany
  • Microsoft Solutions Partner Security
  • Microsoft Solutions Partner Infrastructure Azure
  • Microsoft Solutions Partner Infrastructure Data & AI
  • Kununu Top Company 2025
  • Alliance for Cyber Security

Why the topic of “awareness” is often not taken seriously.

How Pently does it differently

Awareness that changes behavior.

Adaptive phishing simulations.

Difficulty increases with the person's likelihood of clicking. Anyone who clicks easily learns; Those who are sovereign will not be artificially tortured.

Microlearning instead of mandatory e-learning.

Modules under 5 minutes, triggered by specific behavior. Anyone who clicks on a test will immediately see what they missed.

Manager dashboards that make an impact.

Aggregated at team and location level, without person stigma. Suitable for quarterly reports and for discussions with the works council.

Tool plus program.

We deliver not only the platform, but also the program design: 12-month roadmap, communication, escalation, BR coordination.

At a glance

  • Baseline phishing campaign with target/actual comparison
  • Adaptive phishing simulations, 4-10 per year per maturity
  • Microlearning (video, interactive) – can be used modularly
  • Onboarding track for new employees
  • Manager dashboards with team aggregates – GDPR compliant
  • Special modules: Executive Management, IT admins, sales
  • 12-month program roadmap with clear milestones
  • BR-compatible data protection and co-determination guidelines

How we work.

  1. 1

    Baseline

    Initial measurement of click rate, goal setting and BR voting.

  2. 2

    Campaigns

    Adaptive simulations with increasing difficulty triggered by actual behavior.

  3. 3

    Training

    Microlearnings exactly when a click happened and not a year later.

  4. 4

    Reporting

    Quarterly reports, with clear recommendations for the next phase.

Frequently asked questions.

How many phishing simulations per year?+

Recommendation: 4 in the starting phase, then 6-10 per year adaptively. More is usually counterproductive and tires employees.

Is this GDPR compliant?+

Yes. Personal data is only processed internally and for specific purposes, reports are aggregated at team level. AVV and TOMs are included.

What about the works council?+

We provide a codetermination guide with sample text for company agreements. In practice there are rarely problems because reports are not personal.

Can we integrate the platform?+

Yes. SSO via Entra ID/Okta, reports via API in BI tools, microlearnings can be imported into existing LMS as SCORM packages.

Measurable awareness that is guaranteed to have an impact.

Start with a free pilot campaign in one department. You'll see click-through rate, response and potential impact before rolling out company-wide.

Book a free Strategy Call