CALMS
Security awareness and human risk
Awareness training that closes its own loop.
A learning platform built only for security awareness at institutional scale. Every lesson format in one player, rule-based auto-assignment for joiners, role changes and recertification, phishing simulations with a teachable moment on click, and remediation training triggered automatically by a lure click or a breached credential. Certificates verify publicly; evidence packs satisfy auditors.
- SCORM · video · quizOne player for every format
- Closed loopFrom a lure click or breach to training
- VerifiableCertificates anyone can check
How it runs.
- 01AssignA rule enrols the person: new joiner, role change, recertification, or an exposure event.
- 02LearnLessons play in one player; the final quiz gates the certificate.
- 03TestA phishing simulation lands; a click opens the teachable moment and a one-click refresher.
- 04ProveCompletion, resilience and certificates roll into dashboards and sealed evidence packs.
What CALMS does.
- One player, every formatSCORM, HTML micro-learning, video, audio, PDF, quizzes and flashcards, with resume points.
- Phishing simulationsA curated lure library including QR lures, a teachable-moment landing page, and results as sent, clicked, submitted and reported.
- Automatic assignmentVersioned rules enrol people on events or schedules, previewed before activation.
- Campaigns with approvalTraining, email, poster and phishing campaigns submitted by coordinators, approved by admins and rolled out in waves.
- Verifiable certificatesPDF certificates with a serial, validity window and a public verification page, plus recertification sweeps.
- Board and auditor viewsAn executive dashboard with an organisation risk score, and evidence packs sealed with a hash.
Deploy on your terms.
- On-premisesInside your environment on Docker or Kubernetes, with your identity provider and your storage.
- Air-gappedContainerised for networks with no internet; updates and content arrive as bundles you carry in.
- CloudHosted by Cybervahak or in your cloud, with the same operating model and no feature trade-offs.
Integrations and standards.
- Identity
- Standards
Where teams deploy it.
- Awareness programmes for banks and public bodies
- DPDP and CERT-In awareness with evidence
- Phishing resilience by department
- New-joiner and recertification training
- Breach exposure response with BreachGuard
Pairs with the other governance and assurance products.
See CALMS in your environment.
Book a 30-minute walkthrough tailored to your stack, regulators and current security posture. No generic pitch deck, just your questions answered by a senior practitioner.