First Step · 3-month program
Most incidents don’t start with technology — they start with a click. First Step turns your team into the first line of defense: practical training, real-world practice and measured results, in 90 days.
The problem
You can have the best antivirus, firewall and MFA everywhere — one employee convinced by a well-written email opens the door. And with AI, those fake emails, calls and videos keep getting better.
Fake payment requests, altered invoices, compromised mailboxes — aimed at your people, using your company’s name.
AI-generated calls and videos impersonating executives and suppliers. No longer fiction — the fastest-growing scheme.
Employees pasting client and company information into AI tools, with no rules and no sense of the risk.
The program
One-off training builds awareness for a week. First Step is a program: it starts strong, trains in practice and ends with proof of progress.
A practical, in-person session with your team. Real cases, live phishing and deepfake demonstrations, and simple rules anyone can apply the next day.
Theory only counts when the suspicious email actually arrives. We test the team in real context, without blaming anyone — those who fall, learn; those who report, get recognised.
At the end you know exactly where you stand: what improved, who needs reinforcement and what to do next. In numbers, not impressions.
What stays with your company
Investment
The final value depends on team size and session format. You receive a fixed proposal before deciding — and the price you accept is the price you pay.
Who delivers
XKONSULTING is a boutique cybersecurity firm with 27 years of experience across enterprise, government and military environments, operating in Portugal and the US. The person in front of the room is the one who responds to real incidents — and it shows.
Frequently asked questions
Yes — the program was designed for SMBs. The “from €950” price is precisely for smaller teams; the proposal is adjusted to your real size.
The kick-off takes part of a day. After that, practice happens in the normal flow of work — simulations and short reinforcements, without stopping the operation.
No, because nobody gets exposed. Individual results are used to help, not punish — and reporting is recognised. A reporting culture only works without fear.
Yes. You receive documentation of the training delivered and measured progress — usable in audits, customer security questionnaires and insurance processes.
You decide with data. The final report includes recommendations; if it makes sense to continue — annual program, role-based reinforcement or other areas — we present options. No auto-renewal, no pressure.
Request dates
We’ll reply with available dates and a fixed proposal — you decide with everything on the table.
Talk to us for 15 minutes. We’ll explain the program, listen to your context and send a fixed proposal.
Request dates for my team