Built For · Security Leaders
Prove your people are getting harder to attack.
Herd builds training from your own policies and the threats actually reaching your team, and delivers it in Slack and Teams. You get the behavior trend and the audit evidence, current on any given day.
One program: from the threat that lands to the number your board sees.
Grounded in your environment, delivered in your workflow.
- Organization: HerdProgram reportTotal Users10Active Users8Trainings240Assignments231PlatformsSlackTeamsWeb
Whole organization
30%at High or Critical risk
- People
- 10
- Assessed
- 10
- Average score
- 31
- Critical0
- High3
- Medium2
- Low5
You're measuring attendance.
Completion is the only number most awareness platforms produce, and it counts who sat through the course. The question that comes up the first time something gets through is whether those same people would catch a real lure from a real attacker.
The lesson is written from your policies, the day the threat lands.
Describe what happened in a sentence. Herd pulls from your own policy set and the event itself, writes the lesson and the simulation, and ships them to Slack or Teams. Your team approves before anything goes out. What used to be a multi-week content project runs the same day.
- Docusign: contract requires signatureFinance · 42 recipientsReportedSMS: "IT here, verify your MFA device"All staff · 210 recipientsClicked · 6QR code on the break-room parking noticeHQ office · 88 recipientsNo actionVoice: CFO requests an urgent transferFinance leads · 9 recipientsReported
Every channel your people actually get attacked on.
Email, SMS, QR codes, and voice, including cloned voices of people your team knows. Simulations adapt to recent threat activity and to how your employees really communicate. Anyone who clicks gets the teachable moment in the same channel, while it still means something.
- Organization: HerdRisk trend · FY202630%30 pts since Q1 '26
at High or Critical risk
60%Q1 '2650%Q2 '2640%Q3 '2630%Q4 '26CriticalHighMediumLowSee whether your people are getting harder to attack.
Every lesson, simulation result, and coaching event rolls into a risk level per person and per team. You can see who moved out of High and Critical, who reports instead of clicking, and who keeps repeating. Every number opens up to the behavior behind it, so you can explain it to a board without asking anyone to trust a vendor's index.
Send me a click and report rates by department analysis for 2026.
Here’s the click and report rate breakdown by department for phishing simulations sent in 2026:
DepartmentRecipientsClicksClick rateReportsReport rateEngineering551730.9%11.8%Sales411024.4%37.3%Customer Success33515.2%721.2%Marketing29413.8%413.8%Finance48510.4%1122.9%People & Ops2229.1%627.3%Nobody assembles the evidence.
Ask Herd for the year's trend, the click and report rates by department, or which of a manager's reports are still outstanding, and the answer comes back in plain language. Records map to the control they satisfy across SOC 2, ISO 27001, HIPAA, GDPR, and NIST CSF, current on any given day. Reminders and manager escalations run on their own, so none of this lands on your team.
Every framework you are held to, and the evidence for each one.
Framework
What it requires
What Herd hands your auditor
SOC 2 (CC1.4 / CC2.2)
Documented security awareness training for all personnel, with records
Completion by person and department, timestamps, content version
ISO 27001 (A.6.3)
Awareness, education and training, kept current
Rolling completion history plus the lesson content itself
HIPAA (164.308(a)(5))
Security awareness and periodic reminders for the workforce
Training records plus the reminder and escalation log
GDPR (Art. 39)
Staff awareness and training on data protection
Per-employee records, exportable by date range
NIST CSF (PR.AT)
Role-based awareness and training
Records segmented by role and department
PCI DSS (12.6)
Formal awareness program, at least annually
Annual and continuous records in one export
95%+
completion for initial audits
80%+
of employees taking trainings rate Herd 5 out of 5
Under 5
minutes per lesson
1 week
from zero to SOC 2-ready with whole team trained
At past companies we had at least 1 or multiple people dedicated to security awareness and managing the LMS platform. It was an entire full time job. With Herd I can do it as just a small part of my job. And in a way employees actually enjoy.
Kieran PiermanHead of GRC & Security
Herd allows us to ditch the boring long-form lectures for short, timely refreshments that fit into our workflow. It's helped us build a proactive security culture without the training fatigue.
Stefany PrattDirector of CybersecurityTrusted by security and GRC teams at
Frequently Asked
Your questions, answered
No. Herd builds the training, sends the reminders, runs the manager escalations and tracks completion. It is built for teams where security awareness is one responsibility among many.
Completion by person and by department, timestamps, and the training records mapped to the control each framework asks for. It is ready whenever you ask, not assembled the week before.
Yes. Herd delivers in Teams and in Slack, and identity syncs from Entra ID, Okta or Google Workspace so assignments stay current without roster maintenance.
No. You describe what you need in a sentence and Herd builds it from your policies and environment. You can edit it or ship it as is. There is no video editing and no content calendar to keep up with.
Personal data is never used to train LLMs, AI tools or any other feature we deploy. Herd is SOC 2 Type II certified, and sub-processors, retention and data residency are documented in our trust center.
Historical training records are preserved for compliance continuity, and you can run both platforms in parallel during the transition.
Yes! Herd's AI tool isn't solely made for cybersecurity. Teams across HR, sales enablement, onboarding, and learning & development use Herd.
Join the Herd
Stop chasing the spreadsheet.
See Herd automate assignment, delivery, escalation, and evidence for your frameworks.