trainIT · Included in every plan

Your team is the first line. We train it.

Users are the only line of defense between an inbound phishing email and a security incident. Instead of a once-a-year video, we run monthly cybersecurity awareness training built around your organization, and phishing simulations that match what attackers actually send.

Or call 844-625-5925 — a human picks up.

ILLUSTRATIVE EXAMPLE · MONTHLY PHISHING SIMULATION
Accounts Payable ap@your-vend0r.com
URGENT: Invoice #4471 past due — action required
Please review the attached invoice and update payment details before EOD to avoid service interruption.
Open attachment⚑ Report phishing
SPOOFED DOMAINFALSE URGENCYPAYMENT CHANGE
Reported, not clicked. Because she'd seen this exact play in training. TRAINED INSTINCT
100%
Satisfaction guaranteed, in writing
72h
From signed agreement to fully onboarded
24h
Every backup screenshot-verified, daily
24/7
Help desk, included on every plan
What's included

Everything trainIT includes, itemized.

Specific to the org — what tools are deployed, what attack patterns we've seen in the wild, what the user's actual workflow looks like. Simulations match what real attackers send, not outdated templates.

✓

Org-specific staff training

Built around the tools you actually run, the attacks we've actually seen, and your team's actual workflow — not a once-a-year video.

✓

Monthly cybersecurity awareness training

A new security awareness lesson every month on the threats hitting businesses right now, so good habits stay fresh all year instead of fading after one annual session.

✓

Phishing simulation programs

Monthly campaigns using subject lines pulled from the last 30 days of real attacks our SOC has seen. Clickers get a 1:1 follow-up, not a wall of shame.

✓

Tool & software walkthroughs

Training on the tools we deploy, so nobody is guessing at an MFA prompt or the ticket portal.

trainIT commitments

What you can hold us to.

What we do on every account, written down so you can check them.

✓ Monthly cybersecurity awareness training built around your organization.
✓ Phishing simulations based on what attackers send now.
✓ Click patterns reviewed and followed up with the people involved.
✓ Training on the tools your team actually uses.
Pricing

trainIT. is in every plan.

trainIT is included in every wedoIT plan at our published flat rate. No per-incident fees.

✓ Co-Managed $120/user ✓ Complete $225/user ✓ Remote $180/user
  • Co-Managed Monthly cybersecurity awareness training · Monthly phishing simulations · Training on wedoIT-deployed tools
  • Complete Monthly cybersecurity awareness training · Monthly phishing simulations · Training on wedoIT-deployed tools
  • Remote Monthly cybersecurity awareness training · Monthly phishing simulations · Training on wedoIT-deployed tools

trainIT. asked and answered.

How often do you run phishing simulations?
Monthly campaigns per client. Templates rotate based on what our SOC team is seeing in the wild — when Direct Send abuse spikes, that month's campaign uses Direct Send techniques; when AI-generated voice phishing is trending, voice-based campaigns. Generic "click here for free coffee" templates aren't useful anymore.
Do you publicly shame users who click?
No. Click reports go to whoever you designate (usually office manager or HR), and the user gets a 1:1 follow-up — what was the email, what gave it away, what to look for next time. Public "wall of shame" reports cause people to hide future clicks, which is exactly the wrong outcome.
What does the training cover?
Monthly cybersecurity awareness training: a new security awareness lesson every month on the threats hitting businesses right now, built around your organization, the tools you run, and how your team actually works. Monthly phishing simulations use subject lines from the last 30 days of real attacks our SOC has observed. We also walk people through the tools we deploy, so nobody is guessing at an MFA prompt or the ticket portal.
Can you train on industry-specific topics — HIPAA, PCI?
Yes. Compliance-relevant training (HIPAA Security Rule, PCI DSS user training requirements, SOC 2 awareness) can be added and aligned to your compliance audit cycle.
Is training included in all tiers?
Monthly cybersecurity awareness training and monthly phishing simulations are included in all three tiers, and so is training on the tools we deploy. Org-specific training, built around your applications and workflows, is included in Remote and Complete, and available à la carte for Co-Managed.
How do you measure whether the training is working?
Two things, reported in plain English in your monthly speakIT report: whether people are clicking simulated phishing less over time, and whether they're reporting suspicious email to IT before they click. The second should rise as the first falls — that's what a trained team looks like.

A 15-minute call. Straight answers.

Tell us what isn't working with your IT today. We'll tell you honestly whether we're the right fit, and if we're not, we'll point you somewhere that is.

And it's guaranteed: if there is ever anything you are not completely happy with, we will do whatever it takes to make it right.

Prefer scheduled? Book a 15-minute call