Wombat State of the Phish Wombat State of the Phish Wombat State of the Phish Wombat State of the Phish

SaaS-Based Security Awareness and Training for End Users

Wombat State of the Phish Wombat State of the Phish Wombat State of the Phish Wombat State of the Phish

SaaS-Based Security Awareness and Training for End Users

Our Continuous Training Methodology

Our unique Assess, Educate, Reinforce, Measure training methodology combines the four key components of successful cyber security awareness and training programs.

Security methodology cycle

Customers using our cyclical approach have experienced up to a 90% reduction in successful external phishing attacks and malware infections.

Get Our 14-Day Free Trial

Evaluate Knowledge, Identify Vulnerabilities

An important first step in comprehensive cyber security awareness and training for employees is to assess your employees’ knowledge and your organization’s areas of susceptibility.

Learn More
Security Awareness Assessments: Mock Phishing Attacks and Knowledge Assessments

Knowledge Assessments

Use our scenario-based CyberStrength® Knowledge Assessments to gauge your staff’s understanding of a variety of cyber security topics.

Learn More

Simulated Attacks

Choose our customizable ThreatSim®, SmishGuru®, and USBGuru® simulated attacks to identify vulnerabilities to pervasive threat vectors without exposing your organization to an actual attack.

Learn More

Deliver Targeted, Impactful Training

Our interactive training modules are the key to educating your employees about security threats in the workplace and beyond. These 10- to 15-minute modules allow users to learn by doing, engaging them through hands-on decision-making.

  • Email Security / Anti-Phishing Security Awareness Training

    Email Security / Anti-Phishing

  • Mobile Device Security Awareness Training

    Mobile Device Security

  • Social Engineering Security Awareness Training

    Social Engineering

Interactive Security Awareness Training Module

Change Behavior, Reduce Risk

Our educational approach improves knowledge retention, creating longer-term behavior change. It’s also flexible: You can add customized content to highlight known issues, communicate policies, and more.

Learn More

Create a Culture of Security

It’s important to reinforce best practices learned in order to keep cyber security top-of-mind for your employees.

Our PhishAlarm® email reporting add-in enables employees to put their knowledge to use and report suspected phishing emails with the click of a button.

In addition, our portfolio of Security Awareness Materials allows you to highlight key messages and reward positive behaviors within your workplace.

Learn More
Phishing Email Add-In Security Awareness Materials

Analyze Results

The most effective training programs are flexible enough to adapt and change according to your needs. Our reporting tools allow you to gather powerful analytics about your organization’s strengths and weaknesses, calculate results, and plan future training accordingly.

Suggested Programs

Not sure which assessment and education components to select for your cyber security training programs? Our suggested plans identify the Wombat products that will help you target specific threat vectors.



The Anti-Phishing Training Suite combines simulated phishing attacks, our unique Auto-Enrollment feature, and three interactive training modules to help you reduce phishing risks. Learn More

Social Engineering

Social Engineering

Use our CyberStrength assessments and simulated attacks to evaluate susceptibility, and follow with training modules that help your users identify social engineering scams and react appropriately. Learn More



Healthcare settings provide their own unique challenges. Use our healthcare-focused assessments and short, interactive training to build an effective program. Learn More

View All Programs

What Others are Saying...

“We’ve been using Wombat’s PhishAlarm product for some time and can already see the positive impact it’s having on our organization. PhishAlarm easily replaced antiquated suspicious email reporting with a consistent and user friendly process that positively affected employee behavior.”

“We selected Wombat because they offer a comprehensive cyber security preparedness platform. Wombat’s platform enables us to assess internal risk and target training to employees who need it most, thereby strengthening our security profile.”

Wombat Security Blog

Five Cybersecurity Predictions for 2018

Written By:

As we look ahead to 2018, some are predicting new and novel cyberthreats, such as ransomware attacking people through Internet of Things- (IoT-) enabled home appliances. While such dystopian visions may indeed come to pass, what’s clear to us is that end-user risk will continue to play a critical role in an organization’s cybersecurity.

All-In on Technology? Expect Users to Fold When the Chips Are Down.

Written By:

Despite the fact that many security experts have been encouraging — even imploring — organizations to think differently about their end users and focus on building a culture of security from the top down, infosec professionals still yearn for a technical solution to employee-driven cybersecurity woes, phishing in particular. This is, frankly, totally understandable. As humans, we all long for “magic bullet” solutions to pressing and wide-ranging problems, and often hope that the path of least resistance will take us to our desired destination.
Certainly, end-user security awareness training is not a path of least resistance. But it is a path worth walking, on a number of levels. Here’s just one reason why:
You say: “Forget security awareness training. It doesn’t work, and I’d rather put my time and money into technology-based defense-in-depth strategies.”
Your end users hear: “I can do whatever I want because IT will fix it.”

Security Awareness Training: ‘Petrified Users’ Shouldn’t Be Your Goal

Written By:

Given what we do, it’s should come as no surprise that we like to keep our finger on the pulse of the security awareness training market. (You aren’t recognized as a Leader by Gartner for four years running by operating with blinders on, after all.)
We are particularly interested to know how end users are responding to training efforts in different organizations and different industries. Since we believe that users are key to cybersecurity postures — those who maketh the mistakes can also take them away, right? — it stands to reason that we also believe that organizations should consider how their end users might feel about (and react to) cybersecurity education efforts.

Wombat Security Awards 2017: The Year in Review

Written By:

As the end of 2017 approaches, we’re celebrating another exciting year at Wombat Security by looking back on the milestones we’ve achieved and the recognition we’ve received from organizations in the infosec space — including a fourth consecutive year in the Leader quadrant of the Gartner MQ and our “three-peat” ranking in the top 150 of the Deloitte Technology Fast 500™.