--- title: CyberCoach Security and AI Skills Training in Teams and Slack description: CyberCoach is a research-backed platform for role-based cybersecurity, compliance and AI skills training in Teams, Slack and browser. image: https://www.cybercoach.com/hubfs/CyberCoach%20Main%20Hero%20Screenshot.png --- [![CyberCoach Full Logo with Bot Icon](https://www.cybercoach.com/hubfs/CyberCoach_Full_Logo_Black-2.svg)](https://www.cybercoach.com) - [English](https://www.cybercoach.com) - [Español](https://www.cybercoach.com/es/formación-en-concienciación-en-seguridad) - [Français](https://www.cybercoach.com/fr/) - [Suomi](https://www.cybercoach.com/fi/home) - [Svenska](https://www.cybercoach.com/sv/) - PRODUCT ## CyberCoach at a glance An industry-changing platform built on peer-reviewed research: phishing, secure coding, and AI skills training, delivered directly in Teams, Slack, or the browser. ### [The Science Behind CyberCoach Why traditional phishing simulations don't work, according to peer-reviewed research from ETH Zurich.](https://www.cybercoach.com/science-behind-cybercoach?hsLang=en) ### [Is Phishing Simulation Legal Under GDPR? 9 steps GDPR requires before you phish your employees — and a new simulation approach that doesn't need any of them.](https://www.cybercoach.com/legal-basis-phishing-simulation?hsLang=en) ### [Pricing Flexible plans, also monthly. ](https://www.cybercoach.com/pricing?hsLang=en) ### [Blog Latest insights into security awareness and what's new with CyberCoach.](https://blog.cybercoach.com?hsLang=en) ### [Customer Stories Read more about how CyberCoach has helped organizations across different industries modernize their approach to security and AI training. ](https://www.cybercoach.com/customer-stories?hsLang=en) ### [OT Security Training Targeted training for employees working with OT technology.](https://www.cybercoach.com/ot-security-training?hsLang=en) - [AI TRAINING](https://www.cybercoach.com/ai-security-training?hsLang=en) ## [AI Training The most comprehensive role-based AI security and productivity training — built to help employees use AI effectively and safely, and keep your organization compliant with the EU AI Act.](https://www.cybercoach.com/ai-security-training?hsLang=en) ### [AI Security Training Why choose CyberCoach for your AI security training needs?](https://www.cybercoach.com/ai-security-training?hsLang=en) ### [EU AI Act Training Requirements: What You Actually Have To Do AI literacy training has been mandatory since February 2025.  ](https://www.cybercoach.com/eu-ai-act-training-requirements?hsLang=en) - [FOR DEVELOPERS](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) ## [For Developers Go beyond OWASP Top10 and offer hands-on interactive training for technical roles in secure coding and efficient use of AI. ](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) ### [Secure Coding Skills Meet ISO/IEC 27001 or SOC 2 requirements for secure development practices with no-nonsense training for your developers and other technical roles, directly in Microsoft Teams or Slack chat. ](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) - [COMPANY](https://www.cybercoach.com/about-us?hsLang=en) ## [About us We're growing into the most diverse training platform company on the planet.](https://www.cybercoach.com/about-us?hsLang=en) ### [About Us Get to know our international team.](https://www.cybercoach.com/about-us?hsLang=en) ### [Contact Us Get in touch.](https://www.cybercoach.com/contact-us?hsLang=en) ### [Careers We are hiring.](https://www.cybercoach.com/careers?hsLang=en) ### [Partner with us Learn more about our partner program.](https://www.cybercoach.com/partnerships?hsLang=en) - [English](https://www.cybercoach.com) - [Español](https://www.cybercoach.com/es/formación-en-concienciación-en-seguridad) - [Français](https://www.cybercoach.com/fr/) - [Suomi](https://www.cybercoach.com/fi/home) - [Svenska](https://www.cybercoach.com/sv/) [FREE TRIAL](https://www.cybercoach.com/free-trial?hsLang=en) [GET A DEMO](https://meetings-eu1.hubspot.com/maria-bique/cybercoach-demo?uuid=88959d26-2ff7-4dd0-8ebd-dd43eb31443e)     Research-backed, no employee profiling # Security and AI skills training that people complete. CyberCoach teaches phishing judgment, role-based AI skills and secure coding through short conversations in Microsoft Teams, Slack or the browser. No surprise emails, no individual risk scores, no blame — because the peer-reviewed evidence says those don't work. [Start free trial](https://www.cybercoach.com/free-trial?hsLang=en) [Book a demo](https://meetings-eu1.hubspot.com/maria-bique/cybercoach-demo?uuid=88959d26-2ff7-4dd0-8ebd-dd43eb31443e) - ![](https://www.cybercoach.com/hubfs/teams_icon.svg)Microsoft Teams - ![](https://www.cybercoach.com/hubfs/slack_icon.svg)Slack - ![](https://www.cybercoach.com/hubfs/browser_icon.svg)Any browser - Anonymous by default - No GDPR profiling - 14 languages   Hey! I'm CyberCoach. Start Learning Get Advice Assessments September Challenges Profile & Settings No individual scoringPsychologically safe practice EU AI Act readyMeet Article 4 Requirements ## Trusted by security teams worldwide ![City of Helsinki](https://www.cybercoach.com/hubfs/Helsinki_kehystunnus_musta_png.png) ![MavenBlue](https://www.cybercoach.com/hubfs/MavenBlue_logo_v2.svg) ![Stockholmsregionens Försäkring](https://www.cybercoach.com/hubfs/SRF-logotyp-color.svg) ![Virta](https://www.cybercoach.com/hubfs/virta_logo_blue_borderless_RGB%20(1).svg) ![iLOQ](https://www.cybercoach.com/hubfs/iloq3-1.png) ![Finnlines](https://www.cybercoach.com/hubfs/finnlines-logo.svg) ![Finnfund](https://www.cybercoach.com/hubfs/finnfund%20logo.png) ![Finnish National Opera and Ballet](https://www.cybercoach.com/hubfs/ob_logo_black.svg) ![PlaytestCloud](https://www.cybercoach.com/hubfs/Wordmark-Left-Red.png) ![Suomen Ekonomit](https://www.cybercoach.com/hubfs/EKONOMIT2.png) ![](https://www.cybercoach.com/hubfs/Helsinki_kehystunnus_musta_png.png) ![](https://www.cybercoach.com/hubfs/MavenBlue_logo_v2.svg) ![](https://www.cybercoach.com/hubfs/SRF-logotyp-color.svg) ![](https://www.cybercoach.com/hubfs/virta_logo_blue_borderless_RGB%20(1).svg) ![](https://www.cybercoach.com/hubfs/iloq3-1.png) ![](https://www.cybercoach.com/hubfs/finnlines-logo.svg) ![](https://www.cybercoach.com/hubfs/finnfund%20logo.png) ![](https://www.cybercoach.com/hubfs/ob_logo_black.svg) ![](https://www.cybercoach.com/hubfs/Wordmark-Left-Red.png) ![](https://www.cybercoach.com/hubfs/EKONOMIT2.png) What makes CyberCoach different ## Three things no other awareness platform does this way Most vendors sell the same deceptive email test engine with a different dashboard. CyberCoach replaces it with practice, and adds two skill areas that really make a difference. ![](https://www.cybercoach.com/hubfs/anon_icon.svg) 01 ### Psychologically safe phishing practice Employees practise against realistic social-engineering scenarios in a conversation and explain their reasoning in their own words. Nobody is tricked, nobody is caught, and no per-person failure record is created. - Announced practice instead of surprise deception - Only successful completion is recorded — never how someone answered - Covers all channels (including SMS, Teams, WhatsApp, LinkedIn, QR and voice), not just email [Read the research](https://www.cybercoach.com/science-behind-cybercoach?hsLang=en) ![](https://www.cybercoach.com/hubfs/ai%20training%201%20badge.svg) 02 ### Role-based AI skills, not just AI risk Compliance training tells people what not to do. CyberCoach also teaches them to work well with AI: writing better prompts, checking generated output, and knowing what may never be pasted into a model. - Separate paths for developers, finance, HR, legal, sales and leadership - Hands-on prompting and output-validation challenges - Covers the EU AI Act Article 4 literacy duty, mandatory since February 2025 [Explore AI training](https://www.cybercoach.com/ai-security-training?hsLang=en) ![](https://www.cybercoach.com/hubfs/database_training_badge.svg) 03 ### Secure coding at two levels of seniority Interactive secure development training in the same chat as everything else. Secure Coding Practices covers recognizing the common vulnerability classes. Applied Secure Coding takes the same topics to senior level, for engineers who have to judge whether a design is genuinely production-ready. - Multi-layer scenarios with several interacting trust boundaries - Partial controls and trade-offs that need judgment, not rule recall - Design secure architectures and critique remediations that leave residual risk - Evidence of completion for ISO/IEC 27001 and SOC 2 audits [For developers](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) The evidence ## Why we stopped tricking employees Separate peer-reviewed studies covering over 30,000 employees have now tested deceptive phishing simulation in real organizations. The results are why CyberCoach is built the way it is. 31,798+ employees studied. Not only does phishing simulation not seem to produce behavior change, those sent to a training page after failing went on to click *more* phishing emails, not fewer. Lain et al. (2022, 2024), Rozema & Davis (2026) 0 measurable benefit from mandatory retraining after repeat failures Lain et al. — ACM CCS 2024, 4,554 employees 50,000+ € indirect additional costs of person hours required to legally evaluate and procure a phishing simulation platform by a European enterprise Brünken, Buckmann, Hielscher & Sasse — USENIX Security 2023 [The science behind CyberCoach](https://www.cybercoach.com/science-behind-cybercoach?hsLang=en) [Is phishing simulation legal under GDPR?](https://www.cybercoach.com/legal-basis-phishing-simulation?hsLang=en) How it works ## A conversation, not a training page STEP 01 ### It's already in their chat Pinned to the Teams or Slack sidebar and sitting in their inbox — one click, no separate login. We only notify people when a mandatory training deadline is close, never to interrupt real work. STEP 02 ### They work through a real scenario Answering in their own words and reasoning out loud instead of clicking through slides. Guessing does not get you far. STEP 03 ### Feedback lands immediately Personal, in context, while the scenario is still live in their head. STEP 04 ### You get compliance evidence Completions are recorded for your audit. How someone answered never is. Runs on pseudonymous Microsoft or Slack IDs. AI skills training ## Your people already use AI. Teach them to use it well. AI training is not only about avoiding risk — it is about the productivity you lose when people prompt badly and trust output blindly. CyberCoach coaches both sides: precise prompting and critical review, tailored to what each role actually does. - Write prompts that get usable answers first time - Spot hallucinated, biased or unusable output - Know what may never be pasted into a public model - Meet the EU AI Act Article 4 AI-literacy obligation [See AI training](https://www.cybercoach.com/ai-security-training?hsLang=en) [EU AI Act requirements](https://www.cybercoach.com/eu-ai-act-training-requirements?hsLang=en) ![A CyberCoach AI skills challenge teaching LLM basics inside a chat window](https://www.cybercoach.com/hubfs/llm%20basics%20for%20developers.svg) Customers ## What security teams tell us “ Good luck guessing your way through these. Even I failed a CyberCoach Skill Test. **Anonymous CISO**Deep tech company “ CyberCoach creates ongoing learning moments in a way that fits our culture of continuous learning. The AI-enhanced interactions especially help things stick. **Security team**City of Helsinki, Urban Environment Division “ The integration with Microsoft Teams was very quick and straightforward. Making it safe to make mistakes and ask questions at any time has had several positive effects. **Stockholmsregionens Försäkring AB**Insurance, Sweden [Read the customer stories](https://www.cybercoach.com/customer-stories?hsLang=en) FAQ ## Questions security and privacy teams ask Do you run phishing tests? Yes, but not by deceiving people. Employees practise against realistic social-engineering scenarios inside Teams, Slack or the browser and test their judgment safely. Peer-reviewed research from ETH Zurich found that the traditional method — surprise emails and a training page on failure — does not produce lasting improvement and can make behaviour worse. Is phishing simulation legal under GDPR? Simulated phishing with per-employee tracking is profiling under Article 4(4) GDPR, and for most European employers the only realistic legal basis is legitimate interest — which requires the processing to actually be necessary. CyberCoach avoids the question entirely: there are no individual risk scores, learning is anonymous, and only successful completion is recorded. [Read the full legal analysis.](https://www.cybercoach.com/legal-basis-phishing-simulation?hsLang=en) How is CyberCoach different from a normal security awareness platform? Three ways. Phishing skills are built through announced, psychologically safe practice rather than deception and scoring. AI training covers practical role-based skills, not only risk and compliance. And secure coding for technical roles is part of the same platform, in the same chat, rather than a separate developer tool. Does CyberCoach cover the EU AI Act? Yes. The Article 4 AI-literacy obligation has applied since February 2025 and was not deferred by the Digital Omnibus on AI. CyberCoach delivers role-based AI literacy training and records completions as evidence. [See what the AI Act actually requires.](https://www.cybercoach.com/eu-ai-act-training-requirements?hsLang=en) What languages do you support? English, Spanish, Portuguese (Brazil), Portuguese (Portugal), French, Dutch, German, Swedish, Finnish, Danish, Norwegian, Polish, Estonian and Russian. More are in progress — tell us what you need. Can we create our own content? Yes, and it is quick. You can build your own training with AI assistance and adapt our existing content to your own policies and instructions. How long does it take to roll out? CyberCoach installs as a native Teams or Slack app, so there is no new system for employees to log into and no separate account provisioning. Customers typically describe setup as quick and straightforward, and Advanced and Complete plans include a hosted kick-off for employees. ## See it in your own Teams or Slack Start a free trial in minutes, or take 15–30 minutes with us to walk through the platform and check it against your training and compliance requirements. [Start free trial](https://www.cybercoach.com/free-trial?hsLang=en) [Book a demo](https://meetings-eu1.hubspot.com/maria-bique/cybercoach-demo?uuid=88959d26-2ff7-4dd0-8ebd-dd43eb31443e) No credit card needed. ![cybercoach_logo_white.svg.2023_03_15_16_58_04.0](https://www.cybercoach.com/hubfs/cybercoach_logo_white.svg.2023_03_15_16_58_04.0.svg) ### Product - [For Developers](https://www.cybercoach.com/secure-development-training-for-developers?hsLang=en) - [AI Security](https://www.cybercoach.com/ai-security-training?hsLang=en) - [Manage Subscription](https://billing.stripe.com/p/login/28o4jRclF4gab1C6oo) - [FAQ](https://www.cybercoach.com/faq?hsLang=en) ### Connect - [Partner Program](https://www.cybercoach.com/partnerships?hsLang=en) - [Careers](https://www.cybercoach.com/careers?hsLang=en) - [For Media](https://www.cybercoach.com/media?hsLang=en) - [Contact Us](https://www.cybercoach.com/contact-us?hsLang=en) ### Legal - [Privacy](https://www.cybercoach.com/cybercoach-website-privacy?hsLang=en) - [General Terms](https://www.cybercoach.com/general-terms?hsLang=en) ### Company - [About Us](https://www.cybercoach.com/about-us?hsLang=en) - [Blog](https://blog.cybercoach.com?hsLang=en) - [ESG Policy](https://www.cybercoach.com/esg-policy?hsLang=en) © 2026 CyberCoach All rights reserved ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercoach.com/#organization", "@type" : "Organization", "foundingDate" : "2019", "legalName" : "Cult Security", "logo" : "https://www.cybercoach.com/hubfs/CyberCoach_Full_Logo_Black-2.svg", "name" : "CyberCoach", "sameAs" : [ "https://www.linkedin.com/company/cult-security", "https://x.com/cybercoachUS", "https://www.instagram.com/cybercoachus/", "https://www.youtube.com/@CyberCoachOfficial" ], "url" : "https://www.cybercoach.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercoach.com/#software", "@type" : "SoftwareApplication", "applicationCategory" : "BusinessApplication", "applicationSubCategory" : "Security awareness and AI skills training", "availableLanguage" : [ "English", "Spanish", "Portuguese (Brazil)", "Portuguese (Portugal)", "French", "Dutch", "German", "Swedish", "Finnish" ], "description" : "CyberCoach is a role-based security awareness, privacy and AI skills training platform that runs as a conversational app inside Microsoft Teams, Slack or a web browser. Employees practice AI skills and responding to social engineering in short, psychologically safe scenario-based sessions. Learning is anonymous while successful completions are recorded per user so the organization can evidence training completion for compliance. CyberCoach can also run on pseudonymous identifiers such as Slack or Microsoft UUIDs, with no personal data shared with CyberCoach.", "featureList" : [ "Conversational phishing and social engineering challenges", "Role-based training programs for technical and non-technical roles", "AI security and AI use training", "Secure coding training for developers", "OT security training", "Custom content creation", "Compliance assessments (ISO/IEC 27001, GDPR, AI compliance)", "Anonymous learning with per-user completion records for compliance", "Optional pseudonymous deployment using Slack or Microsoft UUIDs" ], "name" : "CyberCoach", "offers" : [ { "@type" : "Offer", "description" : "Cover the basics.", "name" : "Starter", "price" : "49", "priceCurrency" : "EUR" }, { "@type" : "Offer", "description" : "Broad topic coverage, custom content, hosted kick-off.", "name" : "Advanced", "price" : "159", "priceCurrency" : "EUR" }, { "@type" : "Offer", "description" : "Full coverage, 24/7 AI chat, compliance assessments, hosted kick-off.", "name" : "Complete", "price" : "179", "priceCurrency" : "EUR" } ], "operatingSystem" : "Microsoft Teams, Slack, Web browser, iOS, Android", "publisher" : { "@id" : "https://www.cybercoach.com/#organization" }, "url" : "https://www.cybercoach.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercoach.com/#faq", "@type" : "FAQPage", "mainEntity" : [ { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "CyberCoach is a security awareness, privacy and AI skills training platform that runs inside Microsoft Teams, Slack or a web browser. Employees practice role-based skills such as responding to social engineering, ethical and productive use of AI and even secure coding skills in short conversational scenarios. Learning is anonymous, while successful completions are stored so the organization can evidence training completion for compliance frameworks such as ISO/IEC 27001 and SOC 2." }, "name" : "What is CyberCoach?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes, but not by sending deceptive emails to employees. CyberCoach uses conversational phishing challenges in which employees practice recognizing and responding to social engineering scenarios in Teams, Slack or the browser. Peer-reviewed research, including Lain et al. (ETH Zurich, 2022 and 2024), finds that traditional email-based simulated phishing does not reduce risk and can increase misplaced trust in the inbox." }, "name" : "Does CyberCoach do phishing tests?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "No. Learning is anonymous: how an employee answered a training scenario is never visible to managers or administrators. What is recorded is successful completion, so the organization can evidence who has completed required training for compliance purposes. This is privacy by design: the sensitive part of the interaction stays private, and only the completion fact is retained." }, "name" : "Are individual employee answers visible to managers?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes. CyberCoach can be deployed using pseudonymous identifiers, such as Slack or Microsoft UUIDs, so no personal data is shared with CyberCoach. Compliance reporting still works: the mapping between a UUID and a real person is resolved only for authenticated and authorized administrators within the customer's own organization." }, "name" : "Can CyberCoach be used without sharing personal data?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "CyberCoach supports security awareness and secure development training requirements under ISO/IEC 27001 and SOC 2, and includes assessments covering ISO 27001, GDPR and AI compliance on the Complete plan." }, "name" : "Which compliance requirements does CyberCoach support?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "CyberCoach is available in English, Spanish, Portuguese (Brazil), Portuguese (Portugal), Polish, French, Dutch, German, Swedish, Norwegian, Danish and Finnish, with more languages in development." }, "name" : "Which languages does CyberCoach support?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Plans start at 49 EUR per month for Starter, 159 EUR per month for Advanced and 179 EUR per month for Complete, available monthly or yearly, including through the Microsoft Azure Marketplace." }, "name" : "How much does CyberCoach cost?" } ] } ```