Browse every kit, course, and bundle.
Filter by category, tier, format, or price. Membership unlocks the full library.
HTML Course
Finance Team Security: BEC, Wire Fraud & Invoice Scams
An 18-minute course on BEC, wire fraud, vendor bank-account changes, invoice fraud, and the 24-hour fraud recovery window. The team most targeted by social engineering.
HR & People Ops Security
An 18-minute course on employee data classification, secure onboarding/offboarding (where most data loss happens), HR-targeted scams, and privacy obligations.
Sales Team Security: Customer Data, CRM Hygiene & Vishing
An 18-minute course on handling customer data in CRM, recognizing sales-targeted scams (fake prospects, conference attacks), and answering prospect security questionnaires without overcommitting.
Healthcare HIPAA Security Awareness
A 25-minute HIPAA-specific course for covered entities and business associates. PHI handling, breach assessment, state law overlays, and what the 2025 proposed Security Rule update requires.
Financial Services Security Awareness
A 25-minute course for banks, credit unions, asset managers, fintech, and insurance — GLBA, SOX, PCI, BSA/AML, and SEC disclosure obligations in plain English.
Mobile & BYOD Security
A 25-minute course for every employee who uses a phone or tablet for work — security baseline, app permissions, public Wi-Fi reality, and the first 30 minutes after a lost device.
Ransomware Defense for Everyone
A 25-minute course on what modern ransomware actually looks like (it's not what most people think), the four behaviors that prevent most attacks, and what your role is in the first 60 minutes of a real event.
Insider Threat Awareness
A 25-minute course on the three categories of insider risk (most are unintentional), how to spot real warning patterns without becoming paranoid, and how to report concerns through proper channels.
Data Classification & Handling
A 25-minute course on a four-tier classification system (Public / Internal / Confidential / Restricted), how to recognize what level you're holding, and where each level is allowed to go.
Physical Security Essentials
A 25-minute course on handling tailgating without being a jerk, what 'clean desk' actually means, badge protocols, restricted areas, and secure travel.
Cloud Security for Non-Engineers
A 25-minute course for finance, ops, marketing, HR, sales — anyone with admin access to AWS, Azure, GCP, or major SaaS consoles without being an engineer. Four habits that block 95% of attacks.
Manager Security Fundamentals
A 25-minute course for first-line managers on why managers are security's most important people — noticing patterns, coaching through mistakes, handling departures right, and being present during incidents.
Incident Response Playbook: Your First 5 Minutes
An 18-minute course for all employees on what to do in the first 5 minutes when you spot a security incident — how to report it, what NOT to do, and what happens next.
Vendor Security Assessment Training
A 25-minute course for procurement, finance, IT, and security partners on how to triage vendor risk, ask the questions that actually matter, read SOC 2 / ISO 27001 / pen test reports, and get contract terms that protect you.
DevSecOps Training
A 50-minute course on building and running CI/CD pipelines where security is integrated at every stage — from commit to deploy.
API Security Training
A 40-minute course that walks the OWASP API Security Top 10 through real HTTP requests, vulnerable-vs-fixed handlers, and a downloadable API review checklist.
Secure AI Use: Foundations
A 20-minute course that teaches every employee what's safe to paste into AI, how to spot AI-powered phishing, and how to use AI output without getting burned.
Secure AI Use: Advanced
A 60-minute course for the people who deploy AI — champions, builders, and team leads — covering prompt injection, agentic blast radius, data governance, vendor risk, and how to run a secure AI program.
New Hire Cybersecurity Basics Course
A 25-minute HTML course that gets new employees from 'I have no idea' to safe defaults.
Secure Developer Training: AI Coding Risks
A 45-minute course for engineers using AI coding assistants — without shipping vulnerabilities.
Secure Use of AI at Work
A 30-minute course for all employees: approved vs. shadow AI tools, what data never goes into a public model, safer prompting habits, output verification, and AI-powered impersonation defense.
AI Fortress: Security Awareness Month
A 30-minute, all-employee course that powers an AI Security Awareness Month: spot AI-powered phishing and deepfakes, keep data out of public AI tools, and defeat prompt injection and impersonation.
Secure AI Foundations
A 15-minute foundations course on secure AI use. What's the risk, what's our policy, what should you avoid, and what to do if something goes wrong.
Board Director Cyber Oversight
A 20-minute course for board directors on their fiduciary duty around cybersecurity, what to ask the CISO, red flags to watch, and what good governance looks like.
Incident Commander Playbook
A 25-minute course for incident commanders on coordinating security incident response. Your role, the first 6 hours, escalation, cognitive biases, and post-mortems.
Secure AI for Developers
A 20-minute course on using AI tools securely in development: API key protection, secrets management, code generation review, and proprietary code handling.
Advanced Secure AI
A 20-minute advanced course: fine-tuning risks, RAG architectures, guardrails and jailbreaks, red-teaming, and evaluating AI tools for organizational adoption.
CISO Board Briefing Playbook
A 30-minute course for CISOs on planning annual board briefings, defending budget, articulating roadmaps, and building board partnerships.
Secure AI for Developers
Learn to use AI tools securely. Protect API keys, manage dependency risks, review generated code safely.
Manager Security Fundamentals
Managers are security leaders. Learn to model secure behavior, build security culture, and respond to incidents.
Incident Response Training
What to do when a security incident happens. Recognize, report, and respond correctly.
Board Director Cyber Oversight
Board governance essentials. Understand your fiduciary duty, ask smart questions, spot red flags.
Incident Commander Playbook
Incident command fundamentals. Make decisions under uncertainty, escalate wisely, run effective post-mortems.
Advanced Secure AI
Advanced AI security topics. Fine-tuning risks, RAG architectures, guardrails, red-teaming, tool evaluation.
CISO Board Briefing Playbook
Strategic board communication. Plan briefings, defend your budget, articulate roadmaps, build partnerships.
API Security Tier 1
Protect API keys, authenticate requests, rate-limit access, recognize vulnerabilities.
New Hire Cybersecurity Basics
Day-one security essentials. Passwords, phishing, data handling, reporting.
Cloud Security Essentials
Shared responsibility model, access control, secrets, data protection.
Ransomware Defense Tier 1
Recognize, prevent, and respond to ransomware attacks.
DevSecOps Essentials
Security in the development lifecycle. Shift-left, automation, supply chain.
Vendor Security Assessment Tier 1
Evaluate vendor risk, perform due diligence, assess certifications.
Game
Escape the AI Arcade — Standalone Game
A playable browser escape room game on AI security. Five levels, no install, runs anywhere. Perfect for an offsite, a lunch & learn, or Security Awareness Month.
Social Engineering Escape Room Kit
A facilitator-led 60-minute team experience where 6–30 employees defend a fictional company from a coordinated 48-hour social engineering attack.
Cyber Detective: Case Files
A browser-based detective game where employees investigate five real-world security incidents — phishing, BEC, deepfakes, vendor compromise, and ransomware entry — and deliver verdicts with coaching feedback.
Toolkit
Secure AI Use Starter Kit
Everything you need to launch a Secure AI Use program in 30 days — policy, rollout playbook, comms, and a CEO-ready exec summary. No writing from scratch.
Manager Security Toolkit — Annual Subscription
Ready-to-use monthly security conversation materials your managers can run in under 10 minutes. Scale behavior change through managers, no security expertise required.
AI Security Awareness Toolkit
A ready-to-run, fully customizable 4-week campaign that teaches every employee to use AI tools safely — posters, videos, emails, Slack/Teams, microlearning, scenarios, quizzes, manager guides, and job aids.
Manager Toolkit for Repeat Phishing Clickers
Ready-to-use conversation scripts, templates, and checklists that help managers coach employees who repeatedly click phishing simulations into security advocates — without shame or blame.
Security Awareness Month Campaign Kit
4-week whole-company awareness campaign: posters, emails, Slack messages, activities. 70%+ engagement and measurable behavior change.
Bundle
Role-Based Security Bundle: Finance + HR + Sales
Three focused 18-minute role-based security courses bundled at a discount — Finance (BEC/wire fraud), HR (employee data + offboarding), Sales (customer data + CRM hygiene).
Cyber Tabletop Exercise Kit — 10 Ready-to-Run Scenarios
10 ready-to-run cyber incident tabletop exercises for security teams, executives, and boards. Each scenario includes facilitator script, staged discussion prompts, common failure modes, and after-action template.
Executive & Board Cyber Briefing Kit
A polished 15-minute board cyber briefing kit — slides, speaker notes, 24-question Q&A prep, materiality worksheet, tabletop prompts, and an emergency briefing template. Everything the CISO needs to deliver to the board without writing from scratch.
Compliance Crosswalks — Map Awareness Training to Your Framework
Defensible mappings of every ForgeAwareness product to NIST CSF 2.0, ISO 27001:2022, CIS Controls v8.1, SOC 2, PCI DSS 4.0.1, and HIPAA — plus 8 audit-evidence templates auditors actually accept.
AI Arcade: Play Smart. Stay Secure.
A complete neon-arcade campaign-in-a-box: posters, Slack/Teams messages, emails, manager guides, video scripts, and a playable escape room — built around AI safety.
Phishing Simulation Message Pack
31 realistic phishing templates (easy / medium / hard), 10 landing pages, a 5-minute debrief, and manager coaching for repeat clickers.
Quarterly Executive Briefing Bundle
A reusable 15-minute quarterly board briefing system. Interactive slide deck, speaker notes, executive pre-read, Q&A prep with 15 real board questions, and a data-lock refresh checklist.
HIPAA Compliance Bundle
Complete guide to HIPAA Security Rule, Privacy Rule, and Breach Notification. Control mappings, evidence templates, readiness checklist.
GDPR Compliance Bundle
GDPR requirements, data processing agreements, DPIA templates, breach notification. For organizations processing EU personal data.
PCI DSS Compliance Bundle
PCI DSS v4.0: 12 requirements, network architecture, encryption standards, audit readiness. For organizations processing payment card data.
SOC 2 Compliance Bundle
SOC 2 Type I and Type II: Trust Services Principles, control framework, testing, audit prep. For SaaS and managed services.