Skip to content
Book a risk assessment

Habits.

Security habits your staff actually keep.

Short, practical tasks in the Demysti5 app instead of an annual video. Some check themselves. All of them roll up into progress by team and the People score in your portal.

Price
$2 per person, monthly
For
Every staff member, on their phone
Proof
Progress by team, every month
Start with Groundwork
Demysti5Finance team
This week's habit
Spot the fake supplier email
Three emails. One is fake. Find the two clues that give it away.
A few minutesStart
92%
Your team is on track
11 of 12 habits done
Second factor on your phoneChecked
Password manager set up
What not to paste into AI
How it works

A small habit a week beats an hour of training a year.

People remember what they do, not what they watch. So every habit is something to do, on the device they already carry.

  1. 01

    One habit a week

    Each one takes a few minutes and is chosen from the risks Groundwork found, not a generic syllabus.

  2. 02

    Some habits check themselves

    If the habit is "set up a second factor", we confirm it from your identity system instead of taking a tick on trust.

  3. 03

    Progress by team

    Managers see teams, not a league table of individuals. It feeds the People score in your portal.

What staff learn

The basics attackers actually exploit.

Six topics, each with habits that fit a normal working week.

Passwords and passkeys

Move work passwords into a password manager.

Second factors

Register a second factor, and know what to do if you lose your phone.

Phishing and invoice fraud

Spot a fake supplier email, and report it in one tap.

Devices

Turn on updates and screen lock, on work and personal devices.

Working away from the office

Use your phone's hotspot, not the cafe wifi.

AI at work

Know what never goes into an AI tool, and which tools are approved.

What managers see

See where the gaps are, by team and by topic.

The next habit for each team is picked from its weakest topic, automatically.

Team · Example Passwords Second factors Phishing Devices Away AI at work Overall
Finance96%100%95%90%85%86%92%
Admin92%96%90%85%80%85%88%
Advisory88%92%80%76%70%80%81%
Partners70%75%45%55%50%53%58%
Next for PartnersPhishing is the weakest topic, and partners approve payments. "Spot the fake supplier email" goes out on Monday.
Was this you?

The same app turns your staff into part of detection.

When something looks new but might be fine, like a sign-in from a new laptop, we ask the person directly. One tap answers it, and the answer goes straight into your Known Normal.

Needs Always On or Device Shield, which raise the questions.

How Known Normal works
Demysti5 · nowExample
Was this you?
Your work account just signed in from a new laptop in your city, at 9:12am.
Yes, it was meNo, it wasn't
Yes
The new laptop becomes known. The alert closes.
No
It escalates straight away. If your containment settings allow it, the session is ended.
Price

$2 per person a month, counted from your staff list.

Joiners get their first habit in week one. Leavers drop off automatically, so you never pay for people who have gone.

Works well with Policy Kit Guardrails Always On

The first habits come from your Groundwork results.

So your staff start with the risks your business actually has.

Book Groundwork