Proof of reflexes, not attendance.
Most security certificates prove you watched videos. This one proves you caught the bait - repeatedly, under time pressure, at 80% or better. Anyone can verify it, and nobody can buy it.
PASSED ALL CHECKPOINTS AT 80%+,
AND SURVIVED THE CERTIFICATION SHIFT AS A
PREVIEW - YOUR NAME GOES HERE WHEN YOU EARN IT
One scam a week, taken apart.
The message doing the rounds right now, the tell that gives it away, and what to do if it already worked. One email, once a week. No drip campaign.
TRAIN - FREE
Work through all 8 learning blocks: manipulation levers, URLs, the inbox, calls and messengers, identity, incident response. Short briefs, constant reps.
PASS 3 CHECKPOINTS
An exam guards every sector. 80%+ on each - infinite retries while the path is in free launch.
CLAIM IT
Pass all three and the generator below unlocks. The Certification Shift - a live inbox under fire - arrives later as the final boss; early certificates stay valid.
- Read any URL in 3 seconds - registered domain, lookalikes, short links
- Name the manipulation lever being pulled on you: fear, urgency, authority, reward, reciprocity, social proof, liking
- Tell a spoofed sender from a real one - in email, SMS, and calls
- Handle the “quick favor from the boss” and fake-invoice plays at work
- Know which MFA actually holds, and which folds to a fatigue attack
- Run the first 10 minutes after a click: cards, codes, IT, containment
Filters and antivirus catch yesterday's attacks. The message that reaches you was engineered to get past them - which means the last line of defense is the person holding the phone. That line is either trained or it isn't.
For individuals, this is the difference between losing a card number and losing nothing. For workplaces, trained staff is now a legal requirement in the EU (NIS2) - and a verifiable certificate is the cleanest way to show it.
Software watches the gate. The certificate proves YOU do too.