Proof of reflexes, not attendance.
Most security certificates prove you watched videos. This one proves you caught the bait — repeatedly, under time pressure, at 80% or better. Anyone can verify it, and nobody can buy it.
PASSED ALL CHECKPOINTS AT 80%+,
AND SURVIVED THE CERTIFICATION SHIFT AS A
PREVIEW — YOUR NAME GOES HERE WHEN YOU EARN IT
TRAIN — FREE
Work through all 8 learning blocks: manipulation levers, URLs, the inbox, calls and messengers, identity, incident response. Short briefs, constant reps.
PASS 3 CHECKPOINTS
An exam guards every sector. 80%+ on each — infinite retries while the path is in free launch.
CLAIM IT
Pass all three and the generator below unlocks. The Certification Shift — a live inbox under fire — arrives later as the final boss; early certificates stay valid.
- Read any URL in 3 seconds — registered domain, lookalikes, short links
- Name the manipulation lever being pulled on you: fear, urgency, authority, reward, reciprocity, social proof, liking
- Tell a spoofed sender from a real one — in email, SMS, and calls
- Handle the “quick favor from the boss” and fake-invoice plays at work
- Know which MFA actually holds, and which folds to a fatigue attack
- Run the first 10 minutes after a click: cards, codes, IT, containment
Filters and antivirus catch yesterday's attacks. The message that reaches you was engineered to get past them — which means the last line of defense is the person holding the phone. That line is either trained or it isn't.
For individuals, this is the difference between losing a card number and losing nothing. For workplaces, trained staff is now a legal requirement in the EU (NIS2) — and a verifiable certificate is the cleanest way to show it.
Software watches the gate. The certificate proves YOU do too.