Short, story-driven training episodes every month and realistic phishing tests, chosen and scheduled by Huntress's security team based on what attackers are actually sending now. Nothing for you to build or run.
A fake "verify you're human" page that asks someone to paste a command. A real Microsoft login page that asks for a code. No malware to catch, because the user opens the door.
of the malware loader activity Huntress observed in 2025 was linked to ClickFix and fake CAPTCHA schemes that trick users into running a command themselves.
From click to full Microsoft 365 account access in a 2026 device code phishing campaign. The defence is one habit: never enter a code you didn't request.
Sources: Huntress, Endpoint Integrity (2026); Huntress, Hook, Line and Token threat briefing (2026).
Short, story-driven episodes with recurring characters, built by Huntress's security team, on the scams circulating now.
One simulated phishing email per person each month, spread across the month so colleagues don't warn each other.
Anyone who clicks a test gets short, immediate coaching, and follow-up training where it's needed.
Monthly reports on completion, click rates and report rates, useful for insurers and client questionnaires.
We add your people and introduce the programme with a short onboarding video, so nobody is surprised.
RRCyber · setupTraining and phishing simulations are chosen and scheduled each month. Nothing for you to manage.
Huntress · monthlyWhere it helps, we add custom phishing scenarios that mimic the vendors and services your business actually uses.
RRCyber · as neededWe look at the monthly report with you and point out where extra attention would help.
RRCyber · monthlyIncluded
Not included
Training works best alongside protection that catches what slips through. Managed ITDR responds when an account is taken over, and Managed EDR when a computer is.
Where your data goes. Security data from your computers and accounts is processed by Huntress, our security operations partner, in the United States. Huntress handles it under a data processing agreement that covers Canada's privacy law (PIPEDA), notifies us of any breach affecting it within 72 hours, and redirects government requests for it to us where the law allows. If your organization has rules about where data can be processed, raise it on your call and we'll walk through it before anything is installed.
Each service is watched by the same 24/7 security operations centre, so a stolen login and a suspicious laptop are seen as one incident, not two.
Endpoint detection and response. 24/7 detection and response on every computer.
Learn more →Identity threat detection and response. Stop account takeover in Microsoft 365 and Google Workspace.
Learn more →Security information and event management. Your logs collected, watched and kept for compliance.
Learn more →Identity security posture management. Microsoft 365 settings hardened, and watched for drift.
Learn more →Thirty minutes. We'll look at how your computers are covered today, what would happen if one were compromised after hours, and where the gaps are. A plain answer either way.
Or email sales@rrcyber.ca