Skip to content

Start here

For teams that look after money, data and trust.

The organisations attackers go after are the ones doing well: busy, growing, trusted with other people’s money and information. Underwing trains the whole team, from the front desk to the financial director.

A small agency team at work: a woman leans over to talk through something on a colleague's laptop.
Growing businessesTwenty people, real clients, and nobody whose full-time job is security.

Training that runs itself, with nothing for IT to install.

Two colleagues in a bright office going through a printed report together.
Finance teamsSupplier payments, payroll and banking details that can change by email.

Lessons on invoice, payroll and payment fraud, timed around the payment run.

A teacher working through a lesson with two students in a school library.
SchoolsParent data, fee payments and a front office that never stops.

Training for office and teaching staff, and the POPIA basics a school answers for.

A volunteer coordinator with a lanyard smiles over a box of sorted donations in a busy community centre.
Non-profits and community organisationsChurches, charities, foundations and associations: donor trust, grant funding and a board that expects good stewardship.

Proof of training for your board, your funders and your auditors.

A manager briefing colleagues in a corporate meeting room.
Larger organisationsSeveral departments, an audit committee and a cyber-insurance renewal.

Reports by department, evidence exports, and invoicing against a purchase order.

Quotes, purchase orders and rollout →

Built for the people who answer for it.

Whoever approves the payments, signs off the budget or answers to the auditor.

Owners and managing directors
One flat price, about 20 minutes a month for each person, and a report that shows it's working. Nothing to manage.
Finance
The attacks that cost the most come first: changed banking details, fake invoices and diverted salaries.
IT
Nothing to install and no access to your systems. Training aimed at what your filters miss: calls, chats, QR codes and look-alike addresses.
HR and compliance
POPIA-aware training with completion records and certificates, and results that are never used for discipline.

Ready when your team is.