Product
Gorgon Training
Security and compliance awareness training that matches each person's role, names the systems your business actually uses, and produces the evidence your auditor asks for. Ten US dollars per trainee per year.
Security and compliance awareness training that matches each person's role, names the systems your business actually uses, and produces the evidence your auditor asks for. Ten US dollars per trainee per year.
Most awareness training is the same slideshow for every company and every employee. Staff click through it, learn nothing, and the organization is left with a completion record that proves attendance rather than understanding.
Courses talk about "your VPN" and "your single sign-on provider" when half of the businesses taking them have neither. Advice that does not match reality is quietly discarded by the people receiving it.
A payroll officer and a systems administrator face entirely different attacks. Sending them identical content wastes the time of both and leaves each unprepared for what actually reaches them.
A tick in a spreadsheet is not evidence. When a regulator, insurer, or client asks what your staff were trained on and how you know they understood it, attendance records answer none of it.
You describe the person. Everything after that is automatic, and you keep the final say at every point.
Give us a name, a work email, and their role. Paste in the job advert if you have one, or leave it blank and we will draft a description from the role title and what your company does.
The platform reads your company website and the role, then proposes the right classes from the catalog with its reasoning written out. You review it, override anything you disagree with, and decide what is assigned.
Your trainee gets an email with a sign-in link. No password to create, nothing to install. Short video lessons and readings, a quiz at the end of each course, and progress saved automatically so they can stop and come back.
Progress, quiz scores, and a verifiable certificate for every completed class. Reminders chase the stragglers, and you are told when somebody finishes or gets stuck, without having to go looking.
A class is a handful of lessons of two or three minutes each, filmed material and reading mixed together. Every lesson marks itself complete once it has genuinely been watched or read, and the quiz stays shut until the material it examines has been covered.
Answer a short set of yes or no questions about your organization, and every course rewrites itself around the answers. Not a filter over generic content: entire lessons and quiz questions appear or disappear depending on what is true for you.
Tell us you use Slack, Xero, and Google Workspace and the courses say so. Content that names the tools your staff open every morning gets read. Content about "your document platform" does not.
No VPN? Staff are never told to connect to one. No security keys? They learn to protect the codes and prompts they do use. Not regulated? Nobody sits through a lesson on regulatory reporting obligations you do not have.
Take card payments, hold health records, work under NDAs with other companies, or let staff use their own phones for work, and the relevant lessons and quiz questions appear automatically for everyone.
Nobody is ever examined on material they were not shown. Questions are gated alongside the lessons they test, so a small business and a regulated bank sit genuinely different papers.
One catalog. A different curriculum for every organization that uses it.
No modules to buy, no tiers to compare. Every feature is in the price.
Short filmed lessons with a presenter and captions, alongside written material. Scenario videos put staff in the moment a decision is actually made, then test it.
Questions are drawn from a larger bank so two people do not sit the same paper, answers are graded on our servers, and every question explains itself afterwards.
Every completed class issues a certificate carrying a verification code. Anyone holding the code can confirm it online without an account, and it discloses nothing beyond the claim.
Reminders go out as a deadline approaches, overdue training escalates to you, and completed classes come back around for recertification on the cadence you choose.
People join, change roles, and leave. Mark somebody as departed and their records and certificates are kept as your evidence, while you stop paying for them at renewal.
Hosted in Australia, with every request authorized on our servers rather than in the browser. Staff see only their own training, and nobody outside your organization sees any of it.
The same presenter takes your staff through the whole program, in one voice, rather than a different narrator for every module. Lessons cut between her and animated slides that hold the idea on screen while she explains it.
The correct answers are never sent to the page, so the paper cannot be read out of the browser by anyone who thinks to look. Questions are drawn from a larger bank, so two colleagues sitting down together do not get the same one.
Every pass issues a certificate carrying a verification code. A client, an insurer, or an auditor enters the code and gets an answer, without signing up for anything and without being able to browse for anyone else.
It discloses only the claim being made: that this person completed this class at this organization on this date. No email address, no quiz score, no list of their other training.
Connect your HR platform or workflow tool once, and training runs itself. A new hire in your HR system becomes a trained, certified employee without anyone opening our console.
Three API calls mirror the three moments your HR system already knows about. A joiner is analyzed, matched to role-specific training, and invited automatically, usually within a couple of minutes. A role change adds what the new role needs and keeps everything completed. A leaver has access revoked while every certificate is kept as your evidence.
We call you back when training is dispatched, when a request needs a human decision, and when someone completes a class, certificate code included, so your HR record updates itself. Every event is signed the same way Stripe signs theirs, so your receiver already knows how to verify it.
The same operations are exposed as an MCP server, so an AI assistant your company runs can provision and check training with the identical key, permissions, and audit trail as the API. Nothing an agent does is invisible: every action is attributed to the key that made it.
Create, rotate, and revoke API keys from your own settings. Rotation keeps the old key working for 24 hours so a deployment never goes dark mid-swap; revocation is immediate, because that is the button for a leak. Documented in OpenAPI, so your integration team can generate a client in an afternoon.
API access has a one-time US$100 setup fee and needs billing details on file. After that, automation costs nothing extra: the same ten dollars per trainee per year, however they arrive.
A core program for everyone, plus layered modules matched to the roles that need them. The catalog grows, and existing trainees are never disrupted by a change mid-course.
The patterns staff genuinely meet, the three questions that catch nearly all of them, and how to report quickly when one gets through.
Reuse, lookalike sign-in pages, multi-factor prompts and codes, and the caller who wants remote access to fix a virus you do not have.
Classification, personal information and privacy duties, material shared under NDA, and what a breach costs the business and the person who caused it.
Locking screens, lending a signed-in session to a helpful stranger, family use of work machines, and the risks that come with using your own phone for work.
What to report, how fast, and why the first thirty minutes decide whether an incident stays contained. Including why honest mistakes carry no penalty.
Finance and payment fraud, customer-facing verification, hiring managers and the joiner-mover-leaver process, privileged technical access, and safe use of AI assistants.
How many people are fully compliant, how many classes are finished, who is overdue, and who is stuck on a quiz and needs a hand. It is the answer you give an auditor, and it is on the first screen rather than in a report you have to build.
That is the whole price list, with one optional extra: connecting your HR platform through the API has a one-time US$100 setup fee. No platform fee, no minimum seat count, no annual contract negotiation, and no sales call before you can see it.
Your first trainee costs nothing and stays free forever. Run somebody through the whole program, see the training and the certificate, and decide afterwards.
Add somebody and you pay ten dollars for their year, charged when you add them. Their year runs from that day, so a November starter gets a full year rather than six weeks. At your next renewal you are credited for the part of it that runs past that date, so nobody pays twice for the same person over the same days.
Somebody leaves and you simply stop paying for them at renewal. Their completed training and certificates stay on your record as evidence.
Cancel whenever you like from your own settings, with no phone call. Training already paid for runs to the end of the year, and nothing is deleted.
By creating a Gorgon Training account you agree to our terms of service and acknowledge our privacy policy. Both are specific to the training platform, and the privacy policy sets out exactly what is held about the people you enroll.