In short: IRONSCALES Security Awareness Training is the training part of IRONSCALES' human risk management offering, used alongside its AI email security for Microsoft 365 and Google Workspace. It combines short training videos, quizzes and reinforcement modules with phishing simulation, smart-group targeting, your own uploaded videos and reporting by person, department or group.
What IRONSCALES security awareness training is
IRONSCALES makes AI-driven email security that integrates with Microsoft 365 and Google Workspace to detect and remove phishing, business email compromise and account takeover attempts. Its security awareness training is part of what IRONSCALES calls human risk management: phishing simulation, awareness training and a live risk score for every user, all in the same platform as the email protection.
That pairing is the main reason to choose it. The people and tactics your email security sees being targeted can shape who is tested and what they are taught, and the employees' own reports of suspicious email feed back into the platform. IRONSCALES also describes real-time coaching in the inbox through warning banners, simulations and just-in-time feedback.
For the simulation side in detail, see IRONSCALES phishing simulation testing.
What the training includes
- A video library: IRONSCALES lists more than 100 bite-sized training videos, with quizzes and reinforcement modules; its pages describe the built-in library as Wizer content
- Topics including phishing, business email compromise, credential harvesting, insider threats, generative AI threats and compliance subjects such as GDPR, HIPAA and PCI
- Languages: IRONSCALES says its videos are available in more than ten languages
- Your own content: upload, track and score your own training videos alongside the library, useful for internal procedures
- Targeting: match training to roles and attack types using organisation charts and smart groups
- Automation: people who fail a simulation are sent tailored training, and frequently targeted users can receive targeted modules
- Reporting: executive summaries, campaign statistics, quiz scores and completion by person, department or smart group, with exports for audits
For a vendor-neutral list of what to look for in any platform, see choosing security awareness training software.
Options we supply
IRONSCALES sells awareness training in a few ways. We supply these options:
| Option | What it is |
|---|---|
| Security Awareness Training Suite | The core training and simulation capability, licensed per user |
| Security Awareness Training Suite Bundle Plus | A bundled version of the Suite, per user; we confirm exactly what it adds when we quote |
| Security Awareness Training Content Pack | Extra training content to deepen the library |
| Complete Protect (IRONSCALES plan) | IRONSCALES' package that pairs its email security and account takeover protection with human risk management, including integrated awareness training and unlimited phishing simulation testing |
IRONSCALES also lists a Human Risk Management plan that includes awareness training and phishing simulation testing, and on its other email security plans these are shown as Human Risk Management add-ons. Packaging changes over time, so we confirm exactly what each option includes when we quote, and pricing is per user: ask us for a quote. The licensing detail is on IRONSCALES Security Awareness Training licensing.
The report button and the risk score
IRONSCALES gives employees a report phishing button; its pricing page lists a Report Phishing add-in for Outlook and integrated report phishing buttons on its email security plans. We confirm support for the mail clients your staff use during set-up. Reports do more than close a ticket:
- Messages employees flag feed IRONSCALES' crowdsourced threat intelligence, so analysts and the AI can see how similar emails were resolved elsewhere
- Every simulation result, training outcome and reported email feeds a live risk score for each user
- Those scores help decide who receives the next simulation and training assignment
This is why we encourage organisations to celebrate reports rather than only counting clicks. Our guide on how to report a phishing email covers what staff should do, inside and outside the business.
Who it suits
IRONSCALES awareness training tends to suit organisations that:
- Use, or are moving to, IRONSCALES email security, so training, simulation and threat removal share one console
- Run Microsoft 365 or Google Workspace mail
- Want short video-based content with quizzes and the option to add their own videos
- Want training targeted at frequently attacked people, not only those who failed a test
If you already have Microsoft 365 E5 or Defender for Office 365 Plan 2, compare it with Attack Simulation Training. If you use Hornetsecurity or Proofpoint Essentials for email, see the Hornetsecurity Security Awareness Service or Proofpoint Essentials Security Awareness. Every vendor we supply is on the platforms compared page.
How we run it for you
We are vendor-independent and will only recommend IRONSCALES where it fits. When it does, our managed security awareness training service covers:
- Connect IRONSCALES to your Microsoft 365 or Google Workspace tenant and roll out the report button
- Build smart groups for higher-risk teams such as finance, HR and executives
- Run a baseline simulation and assign starter training
- Add your own videos for internal procedures, such as payment verification
- Review reports, risk scores and user-reported email with you each month
- Produce quarterly evidence for your board, auditors or insurer
Contact us for a demonstration, a quote or a neutral recommendation.
Explore IRONSCALES
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does IRONSCALES include security awareness training?
It depends on the plan. IRONSCALES' Complete Protect plan includes integrated awareness training and unlimited phishing simulation, and its Human Risk Management plan includes training and simulation. On its other email security plans, these are Human Risk Management add-ons, and we also supply the Security Awareness Training Suite, Suite Bundle Plus and Content Pack.
Does IRONSCALES work with Google Workspace?
Yes. IRONSCALES email security integrates with both Microsoft 365 and Google Workspace. We confirm report phishing button support for the specific mail clients your staff use before roll-out.
Can we upload our own training videos to IRONSCALES?
Yes. IRONSCALES lets you upload, track and score your own training videos alongside its built-in library.
What languages is IRONSCALES training available in?
IRONSCALES says its training videos are available in more than ten languages. Ask us to confirm the specific languages your staff need.
Is IRONSCALES a good choice for a small business?
It can be, especially if you also want its email security. If you only need training, a standalone platform may be simpler; see security awareness training for small businesses.