Guardey is a gamified cybersecurity awareness training platform whose main purpose is to help businesses continuously train employees to recognize and respond to security threats such as phishing and social engineering, while also meeting increasingly strict compliance requirements. Officially, 95% of data breaches are caused by human error, while the effectiveness of traditional annual training is hard to sustain—only 26% of employees still remember the training content after three months, and most compliance courses last more than 45 minutes, which employees often rush through. Guardey tries to solve this problem with a short, high-frequency, and fun approach.
Main capabilities include: 1) 3-minute weekly micro-learning challenges, supported on desktop and mobile, anytime and anywhere; 2) gamified mechanics that boost engagement through leaderboards, achievements, and hot streaks, creating a friendly competitive atmosphere; 3) phishing simulations that show which employees clicked links or even entered personal data; 4) reports and insights that help track participation, identify knowledge gaps, and prove compliance; 5) compliance support, where the platform helps organizations meet the security awareness and training requirements of frameworks such as NIS2 and ISO 27001 through continuous training, phishing simulations, engagement reports, and audit-ready exports. It also states that NIS2 has taken effect in the EU, imposing legal requirements on organizations in industries such as energy, transport, healthcare, banking, and manufacturing, with fines for violations of up to €10 million or 2% of annual turnover.
How to use it: the setup process takes less than 5 minutes. After starting a free trial, users can get started by connecting users via email or Azure AD SSO. The trial period is 14 days, no credit card is required, it will not automatically charge at the end, and users can choose whether to continue. Pricing starts at €1.53 per person per month, and cancellation is possible at any time. It states there is no minimum user requirement, and it is suitable for teams of 3 or 3000. The customer success team can provide onboarding, best practices, and launch guidance, and additional awareness services are also available to support internal communication and awareness campaigns.
Use cases: suitable for organizations that need to improve employee security awareness, conduct phishing drills, or meet compliance requirements such as NIS2 and ISO 27001. It provides customized training content for industries such as healthcare, education, government, and IT, covering the regulations, threats, and scenarios most relevant to that industry. It states that more than 500 organizations have chosen Guardey.
Limitations and information not yet provided: the materials do not explain which specific compliance frameworks are supported besides NIS2 and ISO 27001; they do not list the specific feature differences between pricing tiers; they do not provide a complete list of customized modules for each industry; they do not state whether identity providers other than Azure AD are supported other identity providers; they do not disclose data storage locations, security certifications, or privacy policy details.