Cyber training your team will actually finish.

Three differences. First, AI configures the training — you describe your team and Qyli picks the right scenario, sector, and focus in 60 seconds rather than you browsing libraries. Second, the scenarios are escape-room style with a clock and real consequences, so people actually engage rather than skip through videos. Third, the dashboard tells you what to do next — not just "here's a CSV of who completed" but "these four people fell for the same trick and here's the 5-minute reinforcement to fix it."

Yes (rolling out now). You send a realistic simulated phishing email to your team and see exactly who clicks, live on your dashboard. The difference is what happens next: instead of just logging a name on a report, anyone who clicks is shown what they missed and enrolled straight into a short interactive training game that drills that exact skill — at the moment they're most likely to remember it. The test and the training are one connected workflow.

Yes. Qyli produces completion records with timestamps, scores, and per-puzzle performance for every participant, exportable as CSV or PDF for audit. The training maps to common framework requirements for security awareness (SOC 2 CC1.4, ISO 27001 A.7.2.2, NIS2 Article 21, GDPR Article 39). Enterprise customers get a compliance reporting pack with framework-specific evidence formats.

Qyli uses a curated scenario engine. The AI doesn't generate puzzles from scratch (which would be unreliable) — it maps your requirements to proven scenarios with the right sector branding, difficulty, and focus areas. We use Anthropic's Claude API with zero-data-retention agreements. Your team's data is never used to train any model and is processed under strict GDPR-compliant terms. Full DPA available on request.

Yes, monthly plans cancel anytime through your billing portal — no support tickets, no negotiations. Annual plans run for the year you committed to, with auto-renewal you can disable in one click. We don't do retention dark patterns. If the product isn't working for you, we'd rather know.

SSO via SAML and OIDC is available on Enterprise plans (Okta, Azure AD, Google Workspace, custom providers). SCIM for user provisioning is on the roadmap for Q2 2026. If you need it sooner, talk to us — early Enterprise customers get input on the build order.

The scenario engine adapts sector context automatically — a healthcare team gets HIPAA-aware framing, a fintech team gets BEC-focused content, a public sector team gets gov.uk-style scenarios. For deeper sector customisation Enterprise customers can commission custom scenario variants built within 2-4 weeks.

Every scenario has three difficulty levels (Casual / Standard / Expert) which adjust the timer, complexity, and number of red herrings. Qyli picks a default based on your description, but you can override it per deployment. The dashboard also tells you when difficulty is misaligned — if your team is scoring 100% across the board, it'll suggest the next level up.