No traps
We don’t send secret scam e-mails to your staff’s inboxes. Practice is open, so nobody is shamed and trust in IT stays intact.
Services · Security training
Skarppi
Two minutes a week, and all your staff spot scams before they cost anything.
Most data breaches start with a message someone believes. Skarppi lets staff practise spotting exactly those: urgent payment requests, fake sign-in pages, parcel text messages and calls from “Microsoft support”.
Each security moment is a short, real situation using your own company name. The employee decides what they would do and gets an explanation and the warning signs straight away. There’s a tip for home too, because the same scams reach families.
No traps and no shaming: practice is open, and answers are visible only to the employee. You get group-level figures, completion per person if you choose, and a training report.
Try it yourself
One security moment, two minutes
This is what a security moment looks like for an employee. Read the message, choose what you would do and see the feedback. Nothing is saved.
From: CEO <management@exampIe.fi>
Urgent – I need your help
Hi,
I am in a meeting and cannot take calls. We need to pay a new partner’s advance today or the deal falls through. The amount is €8,400. Bank details attached. Please don’t tell anyone yet, we will announce it next week.
Thanks!
What do you do?
Why Skarppi
Practice that feels fair
Two minutes a week
A short moment on the phone with a coffee. A new security moment every week keeps it top of mind without training days.
With your name
Messages use your company name and domain, so the exercise looks like a real scam against you would.
Timely all year
Christmas gift card scams in November, tax refunds in August. Seasonal moments arrive at the right time.
A tip for home too
Every security moment has a tip for the family. The same scams reach parents and children, and a good habit travels home.
Ask before you click
Staff can paste a suspicious message into the checker and get an assessment straight away. The message never leaves their device.
Getting started
In use the same day
-
Invite link
You get an invite link and a QR code to share on the intranet, in Teams or on the break room wall.
-
Joining
Employees join with their work e-mail. No installs, no passwords: a personal link is enough.
-
A moment every week
A new security moment opens every week, and the inbox exercises get harder step by step.
-
A report for management
You see participation and skills by group, and completion per person if you choose. The training report serves as evidence for NIS2 and ISO/IEC 27001.
Tiers
Choose the right tier
Every tier has the same app, checker and content in three languages.
Skarppi Basic
An easy way to keep all staff's security skills up to date
4.90 € / user / monthexcl. VAT
- A two-minute security moment every month
- Inbox exercise every quarter
- Current scam warnings as soon as a new scam spreads
- “Ask before you click” checker for suspicious messages
- At least 10 people (€49 / month), no set-up fee
Most popular
Skarppi Plus
When scam emails are the biggest risk, which is the case for most companies
6.90 € / user / monthexcl. VAT
- Everything in Basic
- A new security moment every week
- Monthly inbox exercise that gets harder step by step
- “Ask an expert”: Foregon checks a suspicious message (10 questions a month, more for larger companies)
- Figures per team and a customer portal for management
Skarppi Pro
When you need proof for customers, audits or NIS2
8.90 € / user / monthexcl. VAT
- Everything in Plus
- Training report as evidence for NIS2, the Cybersecurity Act and ISO/IEC 27001
- Your own security moments for your company’s situations
- Quarterly review with management (30 min, remote)
- Live remote training once a year
- “Ask an expert” doubled: 20 questions a month
- At least 15 people (€133.50 / month), no set-up fee
Privacy
Your staff’s trust comes first
- Answers are visible only to the employee
- The employer sees group figures and, if chosen, completion per person, never the answers. Groups under five people are not shown
- E-mail addresses and names are stored encrypted
- Employees can delete their own data at any time
- Messages pasted into the checker never leave the device
The service is designed in line with the GDPR, and a data processing agreement is included in the price.
Frequently asked
Questions about Skarppi
Do you send real scam e-mails to our staff?
No. Practice happens in the app with realistic examples, and everyone knows they are practising. Regular, open practice builds skills without damaging trust in IT.
How long does one security moment take?
About two minutes. An inbox exercise with five messages takes about three minutes.
Are installs or accounts needed?
No. Skarppi works in the browser on phones and computers. Employees join with their work e-mail and use a personal link.
Can we see who answered wrong?
No. Answers are visible only to the employee, so everyone can practise in peace. If you choose, you can follow completion per person: who has done their security moments and exercises. Staff always see in the app which way is in use.
Does the report count as NIS2 evidence?
Yes. The training report shows participation and content for a chosen period and maps to the training requirements of NIS2, the Finnish Cybersecurity Act and ISO/IEC 27001.
Can the content be extended?
Yes. On top of spotting scams you can switch on modules: data protection and GDPR, remote work and travel, using AI safely, cyber security for management (NIS2 duties), social media and phone safety, and speak up, ask and report, which practises saying no, owning up to mistakes and asking before AI gets customer data. Basic includes one module, Plus three and Pro all of them.
Let's talk, it costs nothing
Tell us what is on your mind and we will listen. The first call is free and you are not committing to anything. At worst you get a few good tips, at best a partner who takes care of your company's security.