EU / NIS2 Training Evidence
NIS2 training cannot be compliance theatre.
NIS2 says the people who run a company must take cyber training. DORA says banks and other finance firms must train all staff and their leaders. A certificate shows someone finished a course. It does not show what they would do in a real attack. CyberTown is short attack games made for each job, played every month.
Paid Before 31 December 2026
First year paid up front at sign-up, before 31 December 2026
1.Why NIS2 changes the training standard
Final NIS2 legal interpretation should be confirmed with legal counsel.
Management Bodies
Executives and board members need practical cyber-risk training that connects governance, oversight, accountability, and business impact.
Employees
Employees need regular, practical training that reflects real-world phishing, scams, data handling, AI use, and reporting decisions.
Operational Risk Owners
Privileged users, cyber teams, system owners, and supplier managers need role-specific scenarios tied to access, recovery, escalation, and resilience.
2.The Gap
Finishing a course is not the same as being ready.
| Current Training Evidence | Limitation |
|---|---|
| LMS completion | Shows attendance, not judgement |
| Quiz score | Tests recall, not decision-making |
| Phishing click rate | Measures one threat path |
| Policy acknowledgement | Shows acknowledgement, not readiness |
| Leadership briefing | Often disconnected from operational consequence |
3.What Works Today
Built, and shown in the demo.
Main Game
12 attack stories set in a city, an office and a school, with extra levels for email, the boardroom and a security team.
Crisis Mode
One city, one live attack, five moves that each cost money and time.
Honest Grades
Play badly and you get an F, with the reason. That is why the record means something.
4.Being Built
Founding customers get each part first.
Choice Records
Each choice saved with the player's role and job.
Patterns
Which teams and jobs make strong or weak calls.
Board Reports
A board report, a team view, and files for auditors.
5.How To Start
Play, Read, Talk, Reserve.
Book
Request access to book a 20-minute demo.
Read
Read what the rule asks for in your region, and where training falls short.
Talk
The demo. We play Crisis Mode with you and show what works today and what is still being built.
Reserve
Take a founding place before 31 December 2026. The first year is paid up front at sign-up.
6.EU Founding Defender Prelaunch Pricing
First 50 companies only. Pay the first year up front before 31 December 2026 and keep the founding price for five years.
| Package | Users | Annual Prelaunch Price | Best For | CTA |
|---|---|---|---|---|
| Starter Defence | 100 | €5,100 / year + VAT | Small teams and pilot groups | Select package |
| Team Defence | 250 | €12,750 / year + VAT | Business units and growing organisations | Select package |
| Workforce Defence | 500 | €25,500 / year + VAT | Medium organisations and broad rollout | Select package |
| Enterprise Defence | 1,000 | €51,000 / year + VAT | Large organisations and cross-role coverage | Select package |
| Strategic Enterprise | Upon request | Custom | Multi-division, regulated, or enterprise-wide rollout | Contact sales |
7.Important compliance note
Train cyber-risk decisions before NIS2 becomes an incident problem.
See an attack played in a 20-minute demo. Then take one of 50 founding places.