Leading Experts in Social Engineering, Insider Threats and Cyber Crisis Simulations.

Train your staff to recognise and defend your organisation against cyber threats.

Cyber Security Training and Testing to Protect Your Company From Cyber Threats

Social Engineering Awareness Course

Online Social Engineering Training

Social engineering has proved to be one of the most prolific & effective means of attacking organisations of all sizes. Your staff need to be able to identify & defend against attempted attacks. This 2 hour online course equips your staff with the skills to identify & combat social engineering attacks including spear-phishing, vishing and physical impersonation attacks.

Cyber Crisis Exercise

An immersive and evolving cyber exercise to test your strategic and tactical response to an incident.

Prepare yourself for an attack and test how key staff make and communicate vital decisions in a developing situation.

Cyber Exercise

NCSC Certified Social Engineering Awareness Course

Social engineering has proved to be one of the most prolific & effective means of attacking organisations of all sizes. This certified cyber security training course trains your staff to identify & defend against attempted attacks.

Insider Threat Training

High impact, interactive cyber security training to raise awareness of insider threat risks to your organisation.

Employees are often cited as being the biggest security weakness in your organisation, we help you turn them into your greatest defence.

insider threat training

Cyber attacks can be a massive upheaval for businesses…

Cyber-crime is constantly on the rise, with virtually all UK businesses exposed to cybersecurity risks. Last year, 46% of UK businesses have suffered a cyber-attack of some sort, and without comprehensive IT security, many of these businesses have suffered as a result – either through decreased customer trust or the actual theft of money and personal information.

Businesses We’ve Helped

Futures Housing Group

“Red Goat were really helpful in tailoring a course to our needs. The trainer was really engaging.”

Futures Housing group
Bristol Airport

“Red Goat were very helpful and provided an excellent training course that was really engaging and helpful to a wide range of our staff”.


“I was hugely impressed by the Social Engineering Awareness Course run by Red Goat Cyber Security. It is one of the first courses I’ve encountered where those who attended it have continued to talk about it long afterwards; a sure sign that the key messages imparted by the trainer have stuck. “

John Stanley MBCI, Risk & Resilience Manager
Salisbury National Health Service Trust

“I was delighted with how Red Goat Cyber Security delivered the cyber security table top exercise.  We have learnt valuable lessons to further improve our plans, processes and check lists and would highly recommend them to other organisations”

Bath hospital

“Excellent course and great scenarios. We would recommend this course to anyone, really informative and relaxed. Rarely is there a course that is both informative and enjoyable. Really good.”

Our Blog

Rebuilding after a cyber attack

We talk a lot about handling the initial car crash of a breach. What to do first, the comms that need to go out and the reporting to regulators. This all happens within the first few hours or days of a breach being discovered. What about after that? Last week I ran...
voice cloning 35m USD

Would You Fall For A $35m Voice Cloning Attack?

A high tech vishing attack utilising voice cloning has lost a UAE bank 35 Million USD. What happened? According to the court documents: the Victim Company’s branch manager received a phone call that claimed to be from the company headquarters. The caller sounded like...
Lisa Forte Defcon talk on Social Engineering and insider threat

Defcon Talk: Using SE to create insider threats and win all the things

Lisa Forte's Defcon 2021 talk on social engineering and insider threat. Transcript to follow.

The Gold-Silver-Bronze Command Structure

The Gold-Silver-Bronze or ‘GSB’ command structure was rooted in and developed heavily by the UK emergency services. It was designed to establish a clear hierarchical framework and operational clarity for the command of major incidents or disasters. It is now used by...
Insider Theft

Insider Theft of $119M worth of Coca Cola IP

What happened? An engineer who worked for Coca Cola and other manufacturers is alleged to have stolen valuable trade secrets in order to set up her own company in China using the stolen technology. Xiarong You has been accused of insider theft and economic espionage...
Tesla insider threat case

Tesla Insider Threat Case (Khatilov)

Tesla Insider Threat Case Study   According to the official Filing, Tesla is suing a former employee and software engineer named Alex Khatilov alleging trade secret theft and breach of contract. What actually happened? Khatilov was hired by Tesla in to work on...

Wargaming, Cyber Attacks and Astronaut thinking

CEO Digital Show This week Lisa was on the CEO Digital show discussing Wargaming, Cyberattacks, Protecting Against Romance Fraud, & ‘Astronaut Thinking’ in Leadership. Key points (according to the podcast) We heard about Lisa’s experience coming into a...
TV Licence anti scam email example

The 5 Best Ways to Spot TV Licence Phishing Emails

TV Licence Phishing Emails In the UK a licence is required to watch live TV in the home. With lockdown continuing and people’s reliance on entertainment increasing, It is unsurprising that in the UK, criminals have increased the amount of tv licence phishing emails...
How to defend against a vishing attack

What is Vishing?

Vishing (voice phishing) is a type of phone fraud which use social engineering to extract information or credentials from a victim.  Attackers often use a pretext to misrepresent their authority or position in order to trick the victim into compliance.  Attackers...
Behaviour change whiteboard

Behaviour Change in your Organisation (short video)

Getting your staff to change their security behaviour It is often submitted that fear is bad. Actually, from a behavioural science perspective we know fear is the most effective tool for stimulating behavioural change. Fear of crime is necessary but not sufficient to...

Take control of your cyber security and contact us now...


By submitting your message and your phone number and/or email address, you are permitting us to contact you by these means in response to your enquiry or feedback. You also acknowledge that you have read our privacy terms and that you consent to our processing data in accordance with them.Read our privacy policy here