Services · Fixed-price project
Test your employees with phishing — before someone else does
Most attacks start with one email and one click. We send realistic, harmless phishing emails to your employees over three months, measure who clicks, and follow up with a course in Norwegian. You get numbers instead of gut feeling — and employees who recognize the next attempt.
Fixed-price project
Price
NOK 9,900–14,900
excl. VAT · onboarding · ongoing NOK 150–400/employee/yr
All prices excl. VAT.
What’s included
- A simulated phishing campaign in 2–3 waves over 3 months
- Realistic emails in Norwegian, tailored to your business
- A management report with click rates, trends and the risk picture
- A 1-hour security course in Norwegian for all employees
- Results at group level — no employee is singled out
- Concrete recommendations for technical and human measures
- Optional ongoing testing after onboarding (NOK 150–400/employee/yr)
How we work
- 01
Kickoff
We agree on scope, goals and who in management should know about the campaign. Everything is agreed in writing before the first email goes out.
- 02
Campaign
2–3 waves of realistic phishing emails over 3 months. The difficulty increases along the way — just like real attackers.
- 03
Report
You get a management report without jargon: who-clicked-what at group level, the trend between waves and the top measures going forward.
- 04
Course
A 1-hour course in Norwegian for all employees, built on the findings from your own campaign. Concrete, short and without finger-pointing.
A fit for you if
- have 5–50 employees who use email every day
- get questions from customers or insurers about security training
- want to measure the risk instead of guessing
- have had a near miss and want to avoid the next one
Common questions
What does a phishing test cost?
Onboarding costs NOK 9,900–14,900 excl. VAT, depending on employee count and scope. If you want to keep testing regularly afterwards, it costs NOK 150–400 per employee per year.
How long does it take?
The campaign runs over 3 months in 2–3 waves. The work itself is 5–8 hours on our side, and the report and course are delivered right after the final wave.
Are individual employees singled out?
No. The report shows results at group level. The goal is a culture where people dare to speak up — not punishing whoever clicked.
Do employees need to be warned in advance?
Management must always know about and approve the campaign. We recommend telling employees that the company tests security regularly — without saying when. That’s both fair and most effective.
What happens after the campaign?
Most choose ongoing testing (NOK 150–400/employee/yr) so the effect sticks. The report also points to technical gaps — for example email security and MFA — that we can help with.
Often bought together with
Security review (NSM baseline principles)
Interviews, a technical check and vulnerability scanning — a top-10 action list in a report management understands.
NOK 14,900–29,900
Email security: SPF, DKIM and DMARC
No more email landing in spam — and no more scammers spoofing your domain.
NOK 4,900–9,900
Password manager and MFA for the whole company
One safe home for every password — and two-factor on everything that matters.
NOK 7,900–14,900