Skip to content

Start here

A little every week. A habit for a year.

Security awareness training that runs all year: a new module every month, with a short video lesson and quiz, a challenge, a briefing to read and a card to keep, and a clear view for you of who needs support. Here's the whole year.

The year at a glance

  • Lesson and quiz, about 9 minutes
  • 30-second “attack or genuine?”
  • Briefing, a 4-minute read
  • Your report

  1. 01

    • Lesson 1
    • Lesson 2
    • Lesson 3
    • Briefing
    • Report

  2. 02

    • Lesson 4
    • Challenge
    • Briefing
    • Report

  3. 03

    • Lesson 5
    • Challenge
    • Briefing
    • Report

  4. 04

    • Lesson 6
    • Challenge
    • Briefing
    • Report

  5. 05

    • Lesson 7
    • Challenge
    • Briefing
    • Report

  6. 06

    • Lesson 8
    • Challenge
    • Briefing
    • Report

  7. 07

    • Lesson 9
    • Challenge
    • Briefing
    • Report

  8. 08

    • Lesson 10
    • Challenge
    • Briefing
    • Report

  9. 09

    • Lesson 11
    • Challenge
    • Briefing
    • Report

  10. 10

    • Lesson 12
    • Challenge
    • Briefing
    • Report

  11. 11

    • Challenge
    • Briefing
    • Report

  12. 12

    • Re-test
    • Challenge
    • Year report

The three starter modules arrive in your first fortnight, so the habit forms early. After that, each month brings a new module: a lesson and quiz, a 30-second challenge, a briefing to read and a card to keep. You get a report at the start of every month, and the year ends with a re-test, so you can see what changed.

Three steps. The first takes about five minutes.

  1. 01

    You sign up and add your team.

    Pay by card in a couple of minutes, then paste your team's work emails or upload a spreadsheet. Nobody on your team needs a password.

    Larger organisation? We'll quote and invoice you instead.

    Add your team

    Paste work emails, or upload a spreadsheet.

    • David Nkosidavid.nkosi@tshedzalogistics.co.za
    • Kim Pillaykim.pillay@tshedzalogistics.co.za
    • Jacob Visserjacob.visser@tshedzalogistics.co.za
    • Lee-Ann Cupidolee-ann.cupido@tshedzalogistics.co.za
    • Ofentse Rapooofentse.rapoo@tshedzalogistics.co.za
    • + 13 more
    18 of 25 places usedUp to 25 people · R1 500 a month
    IT gets a one-page allowlist guide.Send welcome emails

  2. 02

    They learn a little every week.

    Each month starts with a short video lesson and a quiz, then a 30-second challenge, a briefing to read and a card to keep. On a phone, on mobile data, in their own time.

    Reminders go out on their own. You don't chase anyone.

    Sue · Thornveld Packaging

    Please note our new banking details. Pay before 3pm.

    Lesson 01 · 5 min

    “Please note our new banking details”

  3. 03

    You see who needs support. Never who failed.

    A dashboard and a monthly report show who has completed each module, which warning signs your team spots well, and who would benefit from a nudge.

    Results are for learning, never discipline. Your team is told exactly what you can see.

    Tshedza Logistics, Finance

    Module 4 of 12 · October

    Completed this month

    84%

    20 of 24 people

    Since month one

    +31

    points on the quiz

    Certificates

    18

    issued so far

    How well the team spots each warning sign

    • Urgency86
    • Authority74
    • Fear81
    • Reward90
    • Borrowed trust52
    • Secrecy68

    Could use a hand

    • TRTsakani RikhotsoMissed borrowed trust twiceNeeds support
    • SMSebenele MavimbelaMissed the ask in the voice noteNeeds support
    4 people haven’t finished module 4Send a reminder

Inside the training

People forget a training afternoon within weeks. Underwing teaches a little every week instead: each month brings a new module, with a lesson, a challenge, a briefing to read and a card to keep.

The opening of Module 1. Every lesson comes in short parts of two to three minutes, with captions, then a quiz.

Every lesson

  1. How it works 2–3 minRecognisable messages from different workplaces, read out one at a time, then how the attack runs from the first contact to the payout.
  2. Spot it 2–3 minThe warning signs, one at a time, the myths that get careful people caught, and two moments where the video stops and your team makes the call.
  3. Stop it 2–3 minThe habit, step by step, a real call that shows it working, and what AI changes about the attack.
  4. If it went wrong 1 minThe first hour: who to call, what to keep, and why reporting fast is never the mistake.
  5. The quiz 2 minYour team spots the warning signs on a real-looking message. Results go to your dashboard.

And it doesn’t stop at the video.

Each module carries on through the month, so there’s always something to think about between lessons. It’s about 20 minutes a month for each person, in four short pieces, on their own Underwing page and in their inbox.

  1. Week 1

    The lesson

    6–7 min, then a quiz

    A short video lesson on one real threat, and a two-minute quiz on a real-looking message.

  2. Week 2

    The challenge

    30 seconds

    One message on their phone: attack or genuine? They find out straight away, and why.

  3. Week 3

    The briefing

    a 4-minute read

    Something to read and think about: a recent real case, how AI is changing the attack, and what to do at your organisation.

  4. Week 4

    The field card

    one page

    The module on a single page to keep, and three questions a manager can raise at the next team meeting.

Year one: twelve modules

The first three arrive in your first fortnight, then a new module every month. AI runs through all of them: every lesson and briefing shows how AI is changing that attack. Each lesson is named after a line attackers really use.

  1. 01Invoice and payment fraud“Please note our new banking details”Starter10 min
  2. 02Phishing and fake sign-in pages“Your mailbox is almost full”Starter6 min
  3. 03Safe use of AI at work“Just paste it into the chatbot”Starter7 min
  4. 04IT impersonation and sign-in prompts“Please enter 62 to confirm it's you”6 min
  5. 05Fake bank and fraud-desk calls“This is the fraud department”7 min
  6. 06Deepfakes and cloned voices“Everyone's on the call”7 min
  7. 07Malware and ransomware“Please see the attached remittance”6 min
  8. 08Payroll fraud“Banking details for my salary”6 min
  9. 09SMS phishing“Discount ends Friday at 23:59”6 min
  10. 10Data protection and POPIA“Can you send me the staff list?”7 min
  11. 11QR-code phishing“Scan to register your vehicle”6 min
  12. 12Account takeover“Pay you back on the 25th, promise”6 min

What it asks of everyone

Your team

A phone and 20 minutes a month

Lessons play in the browser on any phone or computer. No app to install and no password to remember: each person gets their own link by email. Every lesson has captions.

Your IT

One allowlist entry

Our emails come from underwing.co.za. We'll send IT a one-page guide to make sure they arrive and aren't caught by filters. There's nothing to install and no access to your systems.

You

Five minutes to start, a glance a month

Pay, paste your team's work emails, done. Reminders go out on their own. Once a month, a report tells you who has completed each module, what your team spots well, and who would benefit from a nudge.

Results are for learning, never discipline, and your team is told exactly what you can see. What managers can see

Ready when your team is.

Start your teamFree Team Spot Check