Security awareness your works council approves and your insurer recognises.
The first human risk management platform built for the DACH channel. AI-native phishing simulations, real German lures, audit-proof records. First campaign live in under 20 minutes.
- Hosted in Germany
- GDPR privacy by design
- Works-council compliant (groups of 5+)
- Designed for insurer recognition
We are building with 10 founding partners across the DACH region. Places are limited.
The obligation is here. The liability is personal.
60 to 74%
of successful attacks use the human factor.
Source: industry analyses
NIS2 with no grace period
In force in Germany since December 2025. No transition period.
§38 BSIG: a board-level duty
Executive management must be trained. Not delegable, with personal liability.
The supply chain follows
Your largest customers demand proof of training. Without it, contracts get harder to win.
Profile. Simulate. Train. Prove.
Profile
Role and risk profiles per user, continuously updated.
Simulate
AI-generated, realistic lures with real German brands (Sparkasse, DHL, Telekom, ELSTER). Safe and GDPR-compliant.
Train
60-second lessons at exactly the right moment. No annual video.
Prove
Audit-proof evidence for regulators, insurers and your customers. Includes §38 executive training.
AI-native from the first second: the AI runs the programme, not just the translation.
Attacks do not only arrive by email.
We simulate the attack surface your employees actually face: from the inbox to the deepfake call. Safe, controlled, GDPR-compliant.
- SMS (smishing)
- QR code (quishing)
- Voice call (vishing)
And your works council says yes.
Anonymised reporting, minimum group size of 5, designed for co-determination compliance. Hosted in Germany, privacy by design, DPA included.
Read the guide: phishing simulation and works councilsThe facts
- Hosted in Germany, processing exclusively in the EU
- GDPR privacy by design, DPA available immediately
- Anonymised reporting, minimum group size of 5
- Designed for co-determination compliance: no monitoring of individuals
- Works agreement template included
- Selectable tracking mode: anonymous, individual or combined
Designed for recognition by cyber insurers.
Documented, continuous awareness is a factor in premiums and coverage. We build Wachr so the evidence counts.
Lower premiums
Documented awareness feeds into the risk assessment.
Avoid coverage exclusions
The evidence shows duties of care are met.
One-click evidence for your broker
One-click export, clearly presented.
Transparent: per user, per month.
No minimum term, no setup fee. Companies subscribe through their IT partner; MSPs buy at volume rates from €0.60 per user per month (introductory terms).
View pricingPlain talk on NIS2, works councils and the MSP business
All resources
The hardest questions first.
Let's talk about your first campaign.
Under 20 minutes to your first simulation. No credit card, no minimum term.