PricingThree tiers. One platform.

Essentials, Professional and Enterprise are built from the modules the platform actually gates — simulation channels, the training library, risk scoring and compliance evidence. Scope your channel mix and headcount with us, and leave with a proposal your procurement team can take forward.

Book a demo Compare tiers

GDPR native · EU data residency (Frankfurt) · No endpoint agents

Essentials

For organizations establishing a measured baseline.

Simulation

Email, QR code and USB drop campaigns

Training

Posters, infographics, newsletters, policy documents, quizzes and slide decks

Scoring & reporting

Compliance scorecard with raw and audit-adjusted completion rates
Certificates

In every tier

Server-side completion-integrity gate and forensic per-answer feedback.

Book a demo

Recommended

Professional

For security teams that measure risk, not just deliver training.

Simulation

Adds SMS campaigns

Training

The async single-player escape room

Four puzzles, played alone, in a browser, on the employee’s own time. No competitor ships this format.

Adds micro video, animated explainers, interactive HTML5 modules and games
Gamification — points, badges and leaderboards
Thirty languages, localised rather than translated

Scoring & reporting

Human Risk Score with published methodology and component breakdown
Per-module effectiveness correlation
Department correlation quadrant and Champions
Phishing report add-in with AI triage

Compliance & administration

Policy templates with version-aware acknowledgement
Public certificate verification
Branded custom export

Book a demo

Enterprise

For regulated organizations that need evidence, integration and control.

Simulation

Adds WhatsApp, callback, voice (vishing) and deepfake video campaigns

Training

Adds cinematic video and cartoon formats

Compliance & administration

Compliance evidence mapped per tenant to all seven frameworks
Audit log with SIEM export (CSV, NDJSON, JSON)
KVKK and GDPR data export and right-to-be-forgotten erasure
SSO
Billing in your local currency

Book a demo

Full capability comparison

Grouped the way the platform is gated.

Capability comparison across the Essentials, Professional and Enterprise tiers
Capability	Essentials	Professional	Enterprise
Simulation channels
Email phishing	Essentials: included	Professional: included	Enterprise: included
QR code (quishing)	Essentials: included	Professional: included	Enterprise: included
USB drop	Essentials: included	Professional: included	Enterprise: included
SMS (smishing)	Essentials: not included	Professional: included	Enterprise: included
WhatsApp	Essentials: not included	Professional: not included	Enterprise: included
Callback (TOAD)	Essentials: not included	Professional: not included	Enterprise: included
Voice (vishing)	Essentials: not included	Professional: not included	Enterprise: included
Deepfake video	Essentials: not included	Professional: not included	Enterprise: included
Training library
Posters, infographics, newsletters, policy documents, quizzes, slide decks	Essentials: included	Professional: included	Enterprise: included
Micro video, animated explainers, interactive HTML5, games — including the async single-player escape room	Essentials: not included	Professional: included	Enterprise: included
Curated webinar and podcast sessions (embedded third-party)	Essentials: not included	Professional: included	Enterprise: included
Cinematic video and cartoon	Essentials: not included	Professional: not included	Enterprise: included
Gamification — points, badges and leaderboards	Essentials: not included	Professional: included	Enterprise: included
Thirty languages, localised rather than translated	Essentials: not included	Professional: included	Enterprise: included
Scoring
Server-side completion-integrity gate (≥ 90% unique-second coverage)	Essentials: included	Professional: included	Enterprise: included
Engagement classification (Skipped / Fast Clicker / Engaged / Deep Engaged)	Essentials: included	Professional: included	Enterprise: included
Forensic per-answer feedback	Essentials: included	Professional: included	Enterprise: included
Compliance scorecard — raw and audit-adjusted completion rate	Essentials: included	Professional: included	Enterprise: included
Human Risk Score — 0–100, published methodology, component breakdown	Essentials: not included	Professional: included	Enterprise: included
Per-module effectiveness correlation (Pearson r, shown only at n ≥ 10)	Essentials: not included	Professional: included	Enterprise: included
Department correlation quadrant and Champions	Essentials: not included	Professional: included	Enterprise: included
Compliance and evidence
Certificates	Essentials: included	Professional: included	Enterprise: included
Policy templates and acknowledgement, re-gating on version change	Essentials: not included	Professional: included	Enterprise: included
Public certificate verification page	Essentials: not included	Professional: included	Enterprise: included
Compliance evidence mapped per tenant to all seven frameworks	Essentials: not included	Professional: not included	Enterprise: included
KVKK / GDPR data export and right-to-be-forgotten erasure	Essentials: not included	Professional: not included	Enterprise: included
Administration
Phishing report add-in with AI triage	Essentials: not included	Professional: included	Enterprise: included
Branded custom export (PDF / PPT / CSV, section-selectable)	Essentials: not included	Professional: included	Enterprise: included
Audit log and SIEM export (CSV / NDJSON / JSON)	Essentials: not included	Professional: not included	Enterprise: included
SSO	Essentials: not included	Professional: not included	Enterprise: included
Billing in your local currency	Essentials: not included	Professional: not included	Enterprise: included

EssentialsFor organizations establishing a measured baseline.

Simulation channels

Email phishing

QR code (quishing)

USB drop

Training library

Posters, infographics, newsletters, policy documents, quizzes, slide decks

Scoring

Server-side completion-integrity gate (≥ 90% unique-second coverage)

Engagement classification (Skipped / Fast Clicker / Engaged / Deep Engaged)

Forensic per-answer feedback

Compliance scorecard — raw and audit-adjusted completion rate

Compliance and evidence

Certificates

ProfessionalFor security teams that measure risk, not just deliver training.

Everything in Essentials, inherited

Simulation channels

SMS (smishing)

Training library

Micro video, animated explainers, interactive HTML5, games — including the async single-player escape room

Curated webinar and podcast sessions (embedded third-party)

Gamification — points, badges and leaderboards

Thirty languages, localised rather than translated

Scoring

Human Risk Score — 0–100, published methodology, component breakdown

Per-module effectiveness correlation (Pearson r, shown only at n ≥ 10)

Department correlation quadrant and Champions

Compliance and evidence

Policy templates and acknowledgement, re-gating on version change

Public certificate verification page

Administration

Phishing report add-in with AI triage

Branded custom export (PDF / PPT / CSV, section-selectable)

EnterpriseFor regulated organizations that need evidence, integration and control.

Everything in Professional, inherited

Simulation channels

Callback (TOAD)

Voice (vishing)

Deepfake video

Training library

Cinematic video and cartoon

Compliance and evidence

Compliance evidence mapped per tenant to all seven frameworks

KVKK / GDPR data export and right-to-be-forgotten erasure

Administration

Audit log and SIEM export (CSV / NDJSON / JSON)

SSO

Billing in your local currency

How an evaluation works

Four steps, in order, before anything is signed.

Scoping call

Your channel mix and headcount.

Tenant provisioned

Your own tenant, with your branding.

Baseline run

A baseline simulation and the first training assignment.

Review and decide

You review the first Human Risk Score and decide.

Questions

What procurement asks before the first call.

How is NOUSEC priced?

By tier and by the number of people protected. A tier decides which modules are gated on for your tenant; the scoping call establishes your channel mix and headcount, and the proposal follows from those two.

Which tier fits our organization?

Essentials suits organizations establishing a measured baseline: email, QR code and USB drop testing with the core training library and the same completion-integrity gate every tier gets. Professional is the tier most teams choose — it adds SMS testing, the full interactive library including the escape room, the Human Risk Score and per-module effectiveness reporting, and the phishing report add-in with AI triage. Enterprise is built for regulated organizations that need framework-mapped compliance evidence, SIEM export, SSO and the full channel mix. A twenty-minute scoping call settles it quickly. Which evidence you need is usually decided by your sector.

Can we add channels or move between tiers mid-contract?

Yes. Tiers are configurations of one platform: modules are switched on per tenant, so adding a channel or moving up a tier is a configuration change, not a migration. The change is agreed with your account contact and applied to your existing tenant — nothing is reinstalled, and no data moves.

Is completion integrity included in every tier?

Yes. The server-side completion-integrity gate and forensic per-answer feedback are in Essentials and every tier above it. They are not sold as an upgrade.

What compliance evidence is included, and at which tier?

Every tier includes the compliance scorecard with both raw and audit-adjusted completion rates, plus certificates. Professional adds public certificate verification and policy acknowledgement with version tracking. Enterprise maps evidence per tenant to seven frameworks — KVKK, ISO/IEC 27001, NIS2, BDDK, SOC 2, GDPR and ISO/IEC 27701 — and adds the audit log with SIEM export in CSV, NDJSON or JSON, and KVKK/GDPR data export with right-to-be-forgotten erasure.

Where is our data hosted, and what needs to be installed?

EU data residency in Frankfurt, GDPR native. Nothing is installed on employee devices — there are no endpoint agents. The phishing report add-in is an optional mail client add-in.

Scope your configuration with us.

A live demo against your own scenario, not a slide deck.

Book a demo See the platform

GDPR native · EU data residency (Frankfurt) · No endpoint agents