trainIT · Included in every plan

Your team is the first line. We train it.

Users are the only line of defense between an inbound phishing email and a security incident. Instead of a once-a-year video, we run live training built around your organization, and phishing simulations that match what attackers actually send.

Or call 844-625-5925 — a human picks up.

ILLUSTRATIVE EXAMPLE · MONTHLY PHISHING SIMULATION
Accounts Payable ap@your-vend0r.com
URGENT: Invoice #4471 past due — action required
Please review the attached invoice and update payment details before EOD to avoid service interruption.
Open attachment⚑ Report phishing
SPOOFED DOMAINFALSE URGENCYPAYMENT CHANGE
Reported, not clicked. Because she'd seen this exact play in training. TRAINED INSTINCT
100%
Satisfaction guaranteed, in writing
72h
From signed agreement to fully onboarded
24h
Every backup screenshot-verified, daily
24/7
Help desk, included on every plan
What's included

Everything trainIT includes, itemized.

Specific to the org — what tools are deployed, what attack patterns we've seen in the wild, what the user's actual workflow looks like. Simulations match what real attackers send, not outdated templates.

✓

Quarterly live webinars

Live sessions over Teams or Zoom, recorded for absentees. Topics rotate: phishing recognition, password practices, MFA hygiene, social engineering, AI-generated phishing.

✓

Org-specific staff training

Built around the tools you actually run, the attacks we've actually seen, and your team's actual workflow — not a once-a-year video.

✓

Phishing simulation programs

Monthly campaigns using subject lines pulled from the last 30 days of real attacks our SOC has seen. Clickers get a 1:1 follow-up, not a wall of shame.

✓

Tool & software walkthroughs

Training on the tools we deploy, so nobody is guessing at an MFA prompt or the ticket portal.

trainIT commitments

What you can hold us to.

Five things we do on every account, written down so you can check them.

✓ Live training built around your organization.
✓ Phishing simulations based on what attackers send now.
✓ Click patterns reviewed and followed up with the people involved.
✓ Live sessions that remote staff can join.
✓ Training on the tools your team actually uses.
Pricing

trainIT. is in every plan.

trainIT is included in every wedoIT plan at our published flat rate. No per-incident fees.

✓ Co-Managed $120/user ✓ Complete $225/user ✓ Remote $180/user
  • Co-Managed Live training webinars · Training on wedoIT-deployed tools
  • Complete Live training webinars · Training on wedoIT-deployed tools
  • Remote Live training webinars · Training on wedoIT-deployed tools

trainIT. asked and answered.

How often do you run phishing simulations?
Monthly campaigns per client. Templates rotate based on what our SOC team is seeing in the wild — when Direct Send abuse spikes, that month's campaign uses Direct Send techniques; when AI-generated voice phishing is trending, voice-based campaigns. Generic "click here for free coffee" templates aren't useful anymore.
Do you publicly shame users who click?
No. Click reports go to whoever you designate (usually office manager or HR), and the user gets a 1:1 follow-up — what was the email, what gave it away, what to look for next time. Public "wall of shame" reports cause people to hide future clicks, which is exactly the wrong outcome.
What's covered in the live training?
Topics rotate quarterly: phishing recognition (with examples from actual recent attacks we've seen), password practices and password manager use, MFA hygiene and what an MFA-fatigue attack looks like, social engineering and pretexting, AI-generated phishing detection. Sessions are recorded for people who can't attend.
Can you train on industry-specific topics — HIPAA, PCI?
Yes. Compliance-relevant training (HIPAA Security Rule, PCI DSS user training requirements, SOC 2 awareness) can be added per quarter or run alongside the rotating topics. We'll align the calendar to your compliance audit cycle.
Is training included in all tiers?
Live training and phishing simulations are included in all three tiers. Org-specific custom content (training built around your specific applications and workflows) is included in Remote and Complete; available à la carte for Co-Managed.
How do you measure whether the training is working?
Two things, reported in plain English in your monthly speakIT report: whether people are clicking simulated phishing less over time, and whether they're reporting suspicious email to IT before they click. The second should rise as the first falls — that's what a trained team looks like.

A 15-minute call. Straight answers.

Tell us what isn't working with your IT today. We'll tell you honestly whether we're the right fit, and if we're not, we'll point you somewhere that is.

And it's guaranteed: if there is ever anything you are not completely happy with, we will do whatever it takes to make it right.

Prefer scheduled? Book a 15-minute call