Give your employees practical cyber security training they can apply straight away. Explore CanIPhish's library of awareness courses covering phishing, ransomware, AI scams, compliance, role-based risks, and industry-specific threats.
Most cyber attacks do not start with sophisticated malware. They start with a person being tricked, rushed, or caught off guard.
Security awareness training helps employees recognize threats early, respond properly, and make safer decisions in day-to-day work. Done well, it reduces avoidable risk, improves reporting, and supports your wider compliance and security goals.
CanIPhish helps you deliver practical training across core security topics, modern scams, compliance requirements, and role-specific risks.
Explore some of our most popular free security awareness training courses. Each short module uses video-based learning and quizzes to help employees understand key risks and retain what matters.
Check out our blog where we rank the 30 most popular security awareness training courses
CanIPhish is built to help organizations deliver security awareness training that is practical, scalable, and relevant to real threats.
Our library covers core awareness topics, modern attack techniques, compliance requirements, role-based risks, and industry-specific challenges. Every course follows a consistent format, making training easier to roll out and easier for employees to engage with.
All content is created and maintained in-house by cybersecurity experts, so it stays accurate and aligned with how attacks happen in the real world. For global teams, courses are also available across a wide range of spoken and written languages.
Trusted by more than 1,000 organizations worldwide, CanIPhish helps teams deliver training that is easier to manage and more useful for employees.
Find training by topic, team, or compliance need. Use the tabs below to explore courses across core awareness, social engineering, AI threats, regulatory requirements, technical topics, and industry-specific risks.
Core principles of staying safe online and recognizing common threats.
Protect laptops and phones with updates, encryption, and safe habits.
Spot warning signs of malicious, negligent, or compromised insiders.
Build strong passwords and adopt modern authentication practices.
Spot phishing emails, fake login pages, and social engineering tricks.
Prevent tailgating, secure workstations, and protect documents.
Stay secure on home networks, public Wi-Fi, and shared devices.
Browse safely, avoid malicious sites, and recognize unsafe downloads.
Defend against device theft, public Wi-Fi risks, and surveillance.
Understand the risks of unapproved apps and cloud services.
Recognize suspicious behavior in physical and digital environments.
Defend against CEO fraud, vendor scams, and payment redirection.
Spot phishing emails, fake login pages, and social engineering tricks.
Detect malicious QR codes in emails, documents, and public spaces.
Identify SMS-based phishing and fake delivery or banking texts.
Counter reconnaissance, fake profiles, and social media fraud.
Recognize phone-based social engineering using urgency and authority.
Recognize AI-generated phishing, deepfake content, and automated scams.
Identify deepfake audio and video used to impersonate trusted figures.
Use AI tools safely without leaking data or creating compliance risk.
Protect wallets, recognize crypto scams, and use Web3 safely.
Handle California consumer data rights and privacy obligations.
Follow UK GDPR and Data Protection Act requirements.
Understand India's digital personal data protection obligations.
Understand EU AI Act obligations for building and using AI systems.
Understand GDPR principles, data subject rights, and breach duties.
Safeguard protected health information and meet HIPAA requirements.
Support information security management and maintain ISO certification.
Meet NIS2 directive requirements for cyber risk and incident reporting.
Align daily practices with the NIST Cybersecurity Framework.
Comply with Singapore's data protection and consent requirements.
Navigate China's strict personal information protection rules.
Meet POPIA duties for processing personal information in SA.
Follow Australian Privacy Principles for personal data handling.
Meet NZ privacy obligations for collecting and protecting data.
Follow Australian Government protective security standards.
Handle payment card data securely and meet PCI DSS standards.
Follow SOC 2 trust criteria and support audit readiness.
Address executive-level threats like whaling and CEO fraud.
Defend against invoice fraud, BEC, and payment scams.
Protect employee data and secure HR workflows.
Protect client privilege and confidential legal documents.
Protect patient data in fast-paced clinical environments.
Prevent wire fraud and BEC in property transactions.
Secure CRM data, external comms, and client interactions.
Build safe digital habits and recognize online threats.
Safeguard student data and secure digital learning tools.
Understand layered security controls and how they work together.
Protect elevated-access accounts from targeted attacks.
Apply secure coding practices and reduce code vulnerabilities.
Secure OT/IT environments in energy, utilities, and transport.
Protect student data and secure learning platforms.
Counter fraud and protect customer data in financial services.
Address nation-state threats and government compliance needs.
Meet healthcare-specific security and regulatory challenges.
Practical security measures for resource-limited businesses.
Recognize, prevent, and respond to workplace bullying and harassment.
Identify and prevent discrimination to build an inclusive workplace.
Recognize, prevent, and report sexual harassment at work.
Build self-awareness and empathy to improve workplace relationships.
Follow safe practices to protect health and wellbeing at work.
AI CONTENT GENERATOR
With the CanIPhish AI Content Generator, you can create bespoke security awareness training just by prompting the platform. It can generate an AI-delivered training video from your script and build a fully interactive training module around the topic, without requiring you to create everything manually.
Security awareness training works best when it reflects the real risks people face in their roles. Different teams handle different systems, data, and decisions, so training should be matched to the needs of your organization.
Every employee should receive core training during onboarding and at regular intervals after that. This usually includes phishing, password security, secure browsing, device security, remote working, and privacy awareness.
These courses help reduce avoidable mistakes and give employees a stronger foundation for recognizing and reporting threats.
Some topics are better suited to technical teams, including IT administrators, software developers, and privileged users. This includes secure software development, defense in depth, and privileged user best practices.
These courses help reduce technical risk, strengthen implementation decisions, and reinforce secure operational habits.
Some organizations also need training aligned to specific laws, frameworks, or industry requirements, such as HIPAA, GDPR, ISO 27001, SOC 2, NIS2, PSPF, and regional privacy laws.
These courses help employees understand their responsibilities and support broader compliance efforts without losing sight of everyday security behavior.
Start a free account to explore the course library, send out your first training campaign, and see how CanIPhish can support security awareness across your organization.