▶ PLANS & FEATURES

Start free. Scale when your attack surface does — not when your budget cycle does.

The 10-wave game, the Cyber IQ Score, and the full debrief are free for your first ten players on any email domain. Team, Pro, and Enterprise add the org-wide intelligence your CISO actually shows the board.

● ● ●
NO CREDIT CARD  ◆  NO PROCUREMENT CYCLE  ◆  NO "SCHEDULE A DEMO"
Free
Live now
$0
forever, no card

Your first wave is on us. Malware Blaster — one game, full 10-wave loop — so teams can see what policy-enforced training looks like before they ask finance.

PlayersUp to 10
DomainAny email
GamesMalware Blaster
Play Malware Blaster →
Team
Coming May 4

For the 50-person startup that just hired its first security lead. Full 8-game library, SSO, and the Cyber IQ Score by department — without the mid-market sales motion.

Players11 – 100
DomainVerified business
GamesFull library · 8
SSOIncluded
Enterprise
Coming May 4

Full 8-game library at CISO scale. Push scores into KnowBe4 / Proofpoint, map to ISO 27001 & NIS2, and hand auditors evidence without touching a spreadsheet.

Players1,000+
DomainVerified business
GamesFull library · 8
IntegrationsFull stack + SSO + API
▶ FULL COMPARISON

Every feature, every tier.

The full matrix below — nothing hidden behind an "available on request" line, nothing renamed to look bigger. What ships in each plan, full stop.

Free
Live now
Team
Coming May 4
Pro
Coming May 4
Enterprise
Coming May 4
▸ Players & access
Players per organisationUp to 1011 – 100101 – 1,0001,000+ (banded)
Email domainAnyVerifiedVerifiedVerified
Single sign-on (SSO)
SCIM directory sync
▸ Training
Games libraryfull catalogue at May 4 launchMalware Blaster only1 gameFull library8 gamesFull library8 gamesFull library8 games
Malware Blaster — all 10 waves
Five threat categoriesspam · phishing · ransomware · insider · APT
Individual Cyber IQ Score
Per-session debrief & diagnosis
LeaderboardOrg-levelOrg-levelBy role & deptCross-org benchmark
Phishing simulationadd-on · Q3 2026Optional add-onOptional add-on
▸ Analytics & risk intelligence
Personal stats & progress history
Department & role breakdownBasic
Cohort risk tieringnovice → guardian, auto-segmented
Weakness heatmap
Org-wide risk segmentation
Admin dashboard & reportsCSVCSV / PDFCSV / PDF / API
▸ Compliance mapping
CIS Controls v8
NIST CSF
ISO 27001
NIS2
Audit-ready evidence pack
▸ SAT integrations & API
KnowBe4 score pushCSV (Pro) · live API + webhook (Enterprise)CSV exportAPI + webhook
Proofpoint score pushCSV (Pro) · live API + webhook (Enterprise)CSV exportAPI + webhook
REST API access
Webhooks
▸ Support
Community docs & playbooks
Email supportBusiness hoursBusiness hoursPriority + SLA
Dedicated success manager
▶ ADD-ONS

Pay for what you need, when you need it.

Phishing Simulation

Coming Q3 2026 · Pro & Enterprise

Run ThreatSim-style phishing drills alongside the 10-wave game. Results roll into the same Cyber IQ Score — no second dashboard, no second vendor.

Custom Content Pack

Pro & Enterprise

Your SOC's real incident, gamified. Built with the CyberIQ studio team, shipped to your org only.

White-label

Enterprise only

Your brand on the login, the leaderboard, and the debrief PDF.

▶ COMMON QUESTIONS

The questions CISOs always ask first.

Why free first?

Security awareness training has a trust problem. We'd rather you see your team's Cyber IQ Score for real than take our word for it. Ten seats, any domain, zero friction.

Why is there a Team tier now?

Because the jump from 10 to 250 is a cliff, and a 50-person startup shouldn't pay the same per-seat as a 249-person enterprise. Team exists so you can grow out of Free without stalling — full game library and SSO included.

Why verified domains on Team and up?

Once you're reporting on a real organisation, the data has to belong to that organisation. Domain verification stops a stray personal email from polluting your leaderboard or compliance pack.

What happens on May 4?

Team, Pro, and Enterprise unlock. Existing Free workspaces stay free. Teams who've hit the 10-player cap upgrade in-product — no rebuilding scores, no re-onboarding players.

We already have KnowBe4 or Proofpoint. Why add CyberIQ?

KnowBe4 and Proofpoint prove people completed a video. CyberIQ proves they can spot a threat — and pushes that proof back into the SAT platform you've already paid for.

▶ THE NEXT WAVE

The next WAVE of policy-enforced training.

Built for the attack. Owned by your team. The audit takes care of itself.
Play Malware Blaster free →

FREE FOREVER FOR THE FIRST 10 PLAYERS  ◆  TEAM · PRO · ENTERPRISE UNLOCK 2026-05-04