Partner programme

20 % on every booking via your link.

Your clients need documented phishing proof because the insurer, a major customer or an audit asks for it. You give them a link. I deliver training, test and proof; you get the commission. On first and repeat purchases, for as long as the business stays.

The trigger

There’s one line in the risk questionnaire that stops the deal.

“Are all employees regularly trained on phishing, and is it documented?” If the business ticks No, one of three things happens: rejection, a premium surcharge or exclusion of social engineering losses. For you as a broker that means: the deal stalls, or the commission shrinks.

The same No turns up in NIS2 supplier questionnaires and data protection audits. The business can’t solve it alone, and you’re not a training provider. You need something you can hand to the client, that’s done within a week and that the underwriter accepts.

What the business gets

  • Online training for the whole team, video or text
  • Three unannounced phishing tests per person, over five working days
  • Certificate of participation with evidence sheet and verifiable number
  • Company proof for cyber insurance, ISO 27001, GDPR and NIS2
  • Six months of monthly refreshers included
  • Reminder for the annual repetition

49 € per person net, one-off. Repeat run 22 € per person. No subscription.

The number

20 % on first and repeat purchases. No negotiation.

You live from commission and think in commission. “Individual pricing” doesn’t help you. That’s why the number is right here: 20 % of the net amount of every invoice of a business that registered via your link. Including the repeat runs in the following years.

Example: a business with 25 people

Invoice net Your commission
First run: training + test, 25 × 49 € 1.225 € 245 €
Each following year: repetition, 25 × 22 € 550 € 110 €

It costs you no extra time, because the conversation with the client is happening anyway — and it offers your clients a real benefit.

How billing works

Credit on receipt of payment

As soon as the business has paid its invoice, the commission is credited to your account. You get an email, and the balance is visible at any time in the partner dashboard.

Offset or payout

If you buy quotas yourself, I offset the credit automatically. Or, from 50 €, you send me an invoice and I transfer the amount within 14 days.

Permanently assigned

The business stays assigned to you, with no time limit. If it cancels an invoice, the commission on it is reversed — nothing more.

Who it’s for

Four types of partner who already have the trigger on the table.

Insurance brokers

Every new cyber policy enquiry raises the training question. You send the link, the business gets it done within a week, and you present the proof to the underwriter. At renewal I remind the business about the repetition, and you get a copy.

Tax advisers

You speak to every owner each quarter. Two lines in your client newsletter reach every business currently being asked for proof by their insurer or a major customer.

Data protection officers

Art. 32 GDPR requires organisational measures. You advise on which ones — and deliver the implementation at the same time, documented and time-stamped.

IT service providers

For your small clients, an awareness platform with minimum purchase isn’t worth it. Here there’s a one-off price. If you’d rather sell under your own name, take the quota model below.

How it works

Five steps, none of which takes you longer than an email.

01

Send the link

Your client has an open questionnaire or an upcoming renewal. You send them your link with the pre-written two-liner.

02

Business books

The business registers, adds its team and pays the list price. The booking is automatically assigned to you.

03

Campaign runs

Training, then three phishing tests per person over five working days. Fully automatic, without you lifting a finger.

04

Proof is ready

The business receives certificates and the company proof. If it approves, you receive the proof directly by email for the insurer.

05

Repetition

Eleven months later I remind the business, and you get a copy. The hook for your renewal conversation — and commission again.

The two-liner you send your client

“Your insurer requires documented phishing training. This gets it done within a week, 49 € per person, no subscription. On request, I receive the proof directly: [your link]”

Want a conversation starter first? There’s a second link to the free self-test: the owner tests themselves and decides whether you see the result. Both links are in the partner dashboard.

Alternative for IT service providers

Or buy quotas and sell under your own name.

If you want to sell the training as part of your own offering, you buy seats at tiered prices, create your client companies yourself and bill the client however you like. The margin is yours; there’s no additional commission in that case.

Three demo seats are free to start with, so you can go through the product yourself before selling it.

How the quota works

  • Seats from 10, three price tiers by volume
  • Valid for twelve months, payment by invoice
  • You create client companies yourself and invite their admin
  • Billing to your client at your price, under your name
  • Commission credit is offset automatically

You’ll see the tiered prices in the partner dashboard after registering for free. They are well below the list price of 49 €, so your margin works.

Why now

Obligation sells, fear doesn’t.

NIS2 obliges management bodies to undergo training, cyber insurers have almost universally required proof since 2026, and the GDPR requires organisational measures. Businesses don’t buy because they’re afraid, but because someone demands evidence. You have that moment, not me.

What the proof answers

  • Who was trained, and when
  • With what content and scope
  • How it was tested in practice
  • Which requirements are covered
  • When the repetition is due

With time stamp, verifiable number and references to ISO 27001 A 6.3, BSI ORP.3, Art. 32 GDPR and NIS2. Individual personal results are not included.

Frequently asked questions

What partners want to know before starting.

How high is the commission?
20 % of the net amount of every paid invoice of a business that registered via your link. This applies to the first run and to every repeat run in the following years. For a business with 25 people, that’s 245 € for the first run and 110 € per following year.
What does taking part cost me?
Nothing. No entry fee, no minimum purchase, no running costs. You only earn once a business has paid via your link.
How do I get the money?
You see every credit in the partner dashboard and by email. If you buy quotas yourself, the credit is automatically offset against the invoice. Otherwise, from 50 €, you send me an invoice for the amount plus VAT, and I transfer it within 14 days.
Do I get the proof for the insurer directly?
If the business allows it. It ticks a box in the Cockpit, and you then receive the company proof as a PDF by email after every completed run and can download it from the dashboard at any time. Without the tick, you only see that the business is registered and whether training is running. Nobody except the person themselves receives individual employees’ personal results.
Can I have a client tested in advance?
Yes, but only through the client themselves. You give your client your link to the free self-test; they enter their own address and confirm it. When starting, they decide with a tick whether you may see the result; you then get a number, such as “caught 2 out of 3”. Without the tick, you only see that a test was started. Entering other people’s addresses is deliberately not possible — that would be lawful neither under data protection nor competition law.
What if the business already has an account?
Assignment happens at registration. A business that is already a customer can’t be assigned to a partner afterwards. That protects you just as much as the other partners.
Will the underwriter accept the certificate?
The evidence sheet is written in the language of risk questionnaires and names the standards explicitly. It confirms that the measure was carried out, not compliance with a standard as a whole. I’m not an insurer; if your underwriter needs different wording, let me know and I’ll adapt the sheet.
Do I have to take care of anything technical?
No. Platform, training content, phishing simulation, email delivery, invoicing and support are all handled by me. You send a link.
Can my clients see that I’m a partner?
At registration it says that the business comes on your recommendation and is assigned to you. It doesn’t change the price, and there’s no “recommended by” banner anywhere else.

Register, copy the link, send it off.

Your partner account is set up in two minutes. After that, both your links are in the dashboard: one for booking, one for the self-test.

Rather talk first? A short conversation is enough — no pitch, no pressure.

Become a partner

Free, with three demo seats to try out.

Register for free Book a call first
FAQ

Frequently asked questions

Can I offer this to my clients?
Yes. As an IT service provider, you add awareness training to your portfolio without building your own courses: I train your clients in person, or you pass on my materials. Details in the partner programme.
Do I have to create content myself?
No. Training, simulation and proof of training come from me. You keep the client relationship.
What do I earn as a partner?
20% of the net amount of every paid invoice from a business that came via your link, for the first run and every repeat. The credit is offset against your own quota invoices or paid out against your invoice.
Is this a subscription?
No. There is no subscription and no contract term. You book training and tests as you need them – once or on a recurring basis, whatever suits you.
What does it cost?
For businesses, €49 net per person, one-off: training, first phishing test run, team report, Cockpit and six months of monthly refreshers. Further test runs cost €22 per person. For individuals, the training with certificate costs €29 incl. VAT, but without team report, Cockpit and refreshers, hence the lower price. An initial conversation and the self-tests are free. Compare all services on the pricing page →
Does the effect of a one-off training actually last?
Not on its own, which is why I don’t stop at the certificate. Everyone who completes the course receives a short interactive lesson by email every calendar month for six months: under five minutes, no login, a different current topic each time. Keeping it short is deliberate; the effect comes from spreading it over time. In the Cockpit you see your teams’ completion rate and the average score. This refresher is included in the business price at no extra cost.
Do I need an IT department for this?
No. Setup takes about an hour: choose a course, add your team, get started. The proof of training is created automatically. If you like, I’ll set it up together with you.
How does training with you work?
However you prefer: I train your team in person (on site or online), you run the training yourself with my ready-made materials, or each person learns online at their own pace. My recommendation: train first, then run the phishing test as a self-check – that builds a security culture instead of putting people on the spot.
Will anyone on our team be singled out or monitored?
No. There is no public shaming and no personal “who clicked” list for senior management. The team is evaluated as a whole. A wrong click is a learning moment, not an entry in someone’s personnel file.
Does this cover GDPR, NIS2, ISO 27001 or insurance requirements?
It covers the awareness and training part of these obligations – including proof of training with a timestamp. I state openly what belongs to your technology/IT. You’ll find the full comparison under “Obligations & standards”.
What happens when staff change?
You add new team members later with a click: they immediately receive the online training materials and a first self-test, and join the next joint training with the same level of knowledge.
Do I get proof of training or a certificate?
Yes. Proof of participation and completion with date and timestamp is created automatically for each person – as audit-proof evidence for audits, insurers or your own documentation.
Does this also cover AI fraud and deepfakes?
Yes. Current tactics such as AI-assisted phishing, fake voices and deepfakes are part of the courses and simulations – in line with the AI literacy requirement of the EU AI Act.
Are schools and non-profit associations really free of charge?
Yes. For schools and non-profit associations the offer is free of charge – this matters to me personally.
How quickly can I start?
Right away and without a call, if you like: you register your business or institution yourself at /registrieren, add your team, choose the course and phishing templates and start the test run – all on your own in the Cockpit, set up in about an hour. To get a feel for it, there are the free self-tests. And if you’d rather have support, just send me a short message; I’ll get back to you personally.

Your question is not listed?

Ask me directly. You only need to give an email address if you want to receive my answer.

A quick confirmation that a human is typing here, not a bot.

Set up in an hour, trained in a week.

Create a free account, add your team, unlock the course. You only pay when you start. Would you rather see what a test email looks like first? The self-test is free.

Add your team Test it yourself first