Generic is forgettable
Most training gives the same message to everyone, regardless of role, risk, tools, or environment.
LensCraft by everwished
Ban the Beige in Cyber
Custom-lensed security awareness campaigns that turn mandatory training into something people understand, remember, and use.
Most cyber awareness training talks to a pretend average employee. LensCraft talks to your actual teams - the way they work, the risks they face, the tools they use, and the culture they live in. Same security message. Sharper lens. Better outcomes.
Our mission
Ban the Beige in cyber and rewrite the script of compliance theatre.
That means replacing generic content, tick-box quizzes, and predictable phishing drills with security awareness campaigns built around real teams, real culture, and real behaviour.
Why LensCraft
Compliance theatre does not stop criminals
Completion rates look tidy in a report, but tidy reports do not catch suspicious invoices, challenge strange access requests, or make someone report a mistake quickly. Generic training often fails because it is too broad, too bland, and too disconnected from real work.
Security awareness should not be a yearly punishment wrapped in stock imagery and a quiz everyone clicks through while quietly losing the will to live.
LensCraft replaces one-size-fits-all content with role-aware campaigns built around relevance, culture, and practical action.
Completion is not behaviour change
A finished module does not prove that anyone will verify a payment change or report a suspicious message.
Blame does not build culture
People should feel equipped to help, not shamed for being targeted by criminals.
What LensCraft is
One curriculum. Many lenses.
LensCraft keeps your core security message consistent while adapting the delivery for different teams and environments. Finance, field teams, developers, volunteers, executives, and front-line staff may all need the same controls, but they do not need the same examples, tone, or emphasis.
The result is a security awareness campaign that feels specific, useful, and memorable. Security should match how people actually operate, not how policy pretends they do.
Role-lensed
Training is shaped around how each audience works, what they handle, and where they are exposed.
Culture-aware
Tone and delivery are matched to the organisation and team, from professional and practical to more informal where appropriate.
Risk-led
The campaign focuses on the attack paths that matter most to each group.
Measurable
Success is measured through reporting, confidence, behaviour, and operational improvement - not completion alone.
How it works
How lensing works
LensCraft is designed as a campaign, not a content dump. We start with the people and the work, then shape the awareness experience around the reality they operate in.
-
Understand the work
We look at roles, tools, environments, risks, culture, and existing security friction.
-
Shape the lens
We adapt examples, tone, scenarios, and emphasis while keeping the core security message consistent.
-
Deliver the campaign
Training can be delivered through live sessions, remote sessions, micro-learning, scenario prompts, and targeted reinforcement.
-
Reinforce the habits
Short reminders, drills, stories, and manager prompts help turn learning into normal working behaviour.
-
Measure what changes
We look for practical improvement: faster reporting, better verification, fewer workarounds, and stronger confidence.
Tone design
Tone is part of the control
Security training often fails because it speaks to everyone in the same dead corporate voice. LensCraft treats tone as a delivery control, not decoration.
Some teams need calm, precise, professional training. Some need practical banter. Some remember bluntness. Some will remember a rude title long after they have forgotten a policy paragraph.
What stays consistent
The core curriculum and learning outcomes stay stable: pause, verify, report, challenge, protect, recover. The lens changes the route into the conversation so the message survives contact with a real working day.
- Same controls
- Audience-selected tone
- Client-side cultural review
- Staff respected, not mocked
Edge with discipline
Controlled chaos, not random chaos
LensCraft can be funny, blunt, rude, dark, serious, or stripped-back. What it cannot be is careless.
The edge has to do work: reveal a real risk, fit the audience culture, and map back to the same learning outcome. A rude title is not the product. Memory, relevance, and behaviour change are the product.
Reviewed edge, not reckless
No discrimination, protected-class jokes, staff bullying, personal targeting, confidential incident details, defamatory claims, or security guarantees.
The joke is never the staff member
The target is the scam, the bad process, the fake urgency, the weak control, or the corporate theatre that made sensible behaviour harder than it needed to be.
Reviewed before it lands
Strong tone is agreed with the client and reviewed with people who understand the audience. That is how you get memorable without becoming reckless.
Training formats
Training experiences, not learning wallpaper
LensCraft can be a session, a game, a scenario, a micro-drill, a manager huddle, a first-ten-minutes card, or a fully lensed campaign.
The format is chosen because it helps the lesson land. Not because someone bought a template and needed to justify the invoice.
Same controls. Different route in.
First Ten Minutes Incident Card
Give staff a pocket-sized order of operations for the first panic window.
Stop. Preserve. Report. Verify. Do not tidy the crime scene because your anxiety wants a hobby.
Verification Route Picker
Help users pick the right trusted route for payment changes, access requests, urgent messages and supplier claims.
The suspicious message does not get to provide its own witness statement. Pick a route you already trust.
Reporting Confidence Pulse
Measure whether people know how, when and why to report without shame.
Could you report this in two minutes without feeling like you are confessing to a crime?
Supplier Request Triage
Separate reasonable evidence requests from paperwork theatre.
Access, evidence, expiry, escalation. If one of those is missing, ask why before it becomes your incident too.
Manager Huddle Prompt Builder
Give managers short discussion prompts that keep behaviour alive after the session.
This week: one thing we rush, one thing we verify, one thing we would report sooner next time.
Things Staff Think Are Safe But Aren't
Make common unsafe assumptions visible through a game-show-style reveal.
Top answer still hidden. Because apparently guessing is how we run civilisation now.
What you get
What a LensCraft campaign can include
LensCraft is not a single deck with your logo stapled to it like a hostage note. It is a campaign model that can be shaped around the people, risks, and delivery routes that matter.
Role-lensed sessions
Live or remote training shaped around the team receiving it, with examples and emphasis that match their work.
Targeted micro-learning
Short reminders, stories, and prompts that reinforce the message after the session ends.
Context-aware simulations
Phishing and social engineering scenarios that teach useful decisions rather than cheap gotchas.
Reporting playbooks
Simple first-step guidance for what to stop, save, report, and escalate.
Manager and champion packs
Briefing notes and huddle prompts for the people who actually influence team habits.
Measurement and evidence
Practical indicators around confidence, reporting, verification, workarounds, and improvement.
Practice moment
Things people think are safe that are not
A survey-game style training round gives familiar format, fast risk recognition, and a useful reveal without turning staff into the punchline.
This is LensCraft in one picture: familiar format, real risk, quick reveal, useful lesson.
Not a quiz designed to embarrass people. A memory hook designed to make the next weird request feel worth checking.
Use it around QR codes, password-sharing folklore, payment-change pressure, MFA fatigue and all the tiny everyday assumptions attackers love more than shareholders love dashboards.
Practice moment
A tiny risk round, not a gotcha
This compact round reinforces common assumptions without shaming anyone. The useful move is the explanation after the choice.
Why this belongs here
LensCraft can use small, memorable prompts to make people pause, verify and report sooner. The interaction is light, but the habit is serious.
- One prompt at a time
- Short useful feedback
- No blame, no pile-on
Public examples
Same lesson. Different lens. Different audience.
The security outcome stays the same. The route into the conversation changes.
A finance desk, a driver on a break, a platform engineer, a cleaning team, and an emergency crew do not face the same pressure, tools, risks, or jokes. LensCraft uses that reality instead of pretending everyone is the same imaginary office worker from a stock photo.
Finance team
How to Bank Safely can become Stop Approving Bank Changes From Email when payment pressure is the real enemy. Same control: verify the route before money moves.
Drivers and logistics teams
How to Wank Safely Without Getting Phished is not random shock content. It points at personal devices, public Wi-Fi, adult-site scams, blackmail risk, SMS phishing, and reporting without embarrassment.
Healthcare and emergency teams
Don't Flatline Your Credentials uses dark humour only where the audience lives with urgency and triage. Same lesson: slow the fake emergency before it becomes a real incident.
IT and platform teams
Privileged Access Without Regret or Temporary Exceptions Become Permanent Incidents lands with teams who know the risk but normalise dangerous convenience.
Cleaning and facilities teams
How to Janitor Safely and Tailgaters Are Not Guests treat facilities teams as part of the security system, not scenery around the office.
Scenario pathways
Different teams, real routes through the same controls
The supplied pathways add charity, education, leadership, board and supplier-assurance material without turning the lander into a swamp.
Payment Pressure and Invoice Fraud
Make verification feel like professional discipline, not a delay or personal doubt.
Prompt: The supplier sounds familiar, the invoice is urgent, and the bank details have changed. Now what, before the money grows little legs and leaves?
Expected behaviour: Pause payment, verify through known details, document the check, report suspicious pressure early.
Security on the Road Without the Beige
Connect personal-device and travel habits to business risk without pretending drivers live in an office.
Prompt: You are between stops, bored, on public Wi-Fi, and your phone is doing half your life admin. Lovely little attack surface on wheels.
Expected behaviour: Inspect links and QR codes, avoid risky USB/data connections, protect badge/device, report suspicious SMS or credential prompts.
Triage the Digital Weirdness
Help pressured teams slow fake urgency without slowing real care.
Prompt: A message looks clinical, urgent and plausible. That does not mean it deserves your login, your click, or your silence.
Expected behaviour: Verify unexpected prompts, report quickly, protect shared devices, escalate incidents without shame.
Temporary Exceptions Become Permanent Incidents
Turn known admin risks into controlled routines with logging, expiry, and recovery discipline.
Prompt: You know the risk. The problem is convenience, pressure, and that horrifying phrase “just this once”.
Expected behaviour: Control break-glass use, isolate backups, remove persistence before restore, disable stale access, log exceptions.
Lead Safely When the Weird Request Comes From the Top
Make leaders model calm verification and treat cyber as operational risk, not IT decoration.
Prompt: Attackers do not need to be clever if leadership urgency keeps doing their admin for them.
Expected behaviour: Use secure travel habits, support reporting culture, adopt stronger auth, avoid bypassing controls through status.
Tailgaters Are Not Guests
Treat facilities teams as security sensors with authority, not background scenery.
Prompt: You see the door, the badge, the visitor, the abandoned USB, and the “just let me through mate” routine before anyone else does.
Expected behaviour: Challenge tailgating, protect badges, avoid shared-device password saves, escalate unknown media and fake support calls.
Protect the Mission, Not the Paperwork
Make security feel like protecting service users, donors, volunteers and scarce resources.
Prompt: When money, records, volunteers and emotion all collide, scammers do not need a cape. They need one rushed inbox.
Expected behaviour: Verify payments, control sharing, avoid unapproved AI/data tools, report suspicious messages, keep sensitive data in approved routes.
Trust But Verify Without Making It a Punch-Up
Help teams ask better supplier questions and spot evidence gaps before contracts turn into regret.
Prompt: A supplier answer can be honest, incomplete, outdated, or beautifully formatted nonsense. Your job is to know which.
Expected behaviour: Use named access, verify contact routes, request evidence, disable stale supplier access, report odd behaviour.
Lens Lab Preview
A public taste of the LensCraft tone range
These are not random joke titles. They are hooks designed around how different groups work, talk, and remember.
The core lesson stays stable. The lens changes so the training lands.
Logistics, transport and drivers
Core risk: Mobile work, personal devices, public Wi-Fi, SMS scams, adult-site scams, blackmail risk, risky USB/device bridging
- Polished: How to Drive Safely Digitally
- Banter: Don't Let Dodgy Links Jackknife the Day
- Blunt: If It Feels Urgent, Verify It
- Rude: How to Wank Safely Without Getting Phished
Drivers and logistics teams often work away from managed offices, use phones constantly, and may respond better to direct humour than policy-scented wallpaper.
Finance, accounting and payroll
Core risk: Invoice fraud, supplier bank changes, CEO fraud, payroll diversion, approval pressure
- Polished: How to Bank Safely
- Banter: The Urgent Payment Special
- Blunt: Stop Approving Bank Changes From Email
- Rude: Your Invoice Process Is Not a Vibe Check
Finance teams need precise verification habits, calm challenge routines, and permission to slow down urgent payment pressure.
Healthcare and emergency services
Core risk: Urgency pressure, fake referrals, ransomware, shared workstations, incident escalation under stress
- Polished: Triage Your Inbox
- Banter: Blue Lights, Red Flags
- Blunt: If It Looks Urgent, Check It Twice
- Gallows: Don't Flatline Your Credentials
Clinical and emergency teams live with pressure, triage, and dark humour. The lens should respect that without trivialising patient safety.
IT, support, sysadmins and platform teams
Core risk: Privileged access, MFA exceptions, break-glass accounts, vendor access, secrets handling, logging gaps
- Polished: Privileged Access Without Regret
- Banter: Stop Being Root for Convenience
- Blunt: Temporary Exceptions Become Permanent Incidents
- Rude: Temporary MFA Exceptions: A Love Story That Ends in Breach Reports
Technical teams know the risks but often normalise dangerous convenience. The lens should be direct and operational.
Cleaning, facilities and building services
Core risk: Tailgating, badges, contractor access, shared inboxes, supplier scams, physical and cyber overlap
- Polished: How to Maintain Safely
- Banter: How to Janitor Safely
- Blunt: Tailgaters Are Not Guests
- Rude: Don't Let Randoms Wander In Like It's a Theme Park
Facilities teams often see things office staff miss. They can be a powerful security sensor if training treats them as part of the system.
Charities, NGOs and mission-led teams
Core risk: Donation fraud, volunteer access, shared accounts, social media takeover, beneficiary data
- Polished: Protect the Mission
- Banter: Don't Let Fraud Eat the Budget
- Blunt: Stop Letting Scammers Spend the Donations
- Rude: Donor Fraud Is Not a Fundraising Strategy
Mission-led organisations need training that connects security to protecting people, funds, reputation, and service delivery.
Lens lab
Try the LensCraft session-name generator
Pick an industry, audience, and tone. This gives a tiny public taste of how a single security topic can be reframed for different teams. The real work goes deeper because the full recipe belongs in client discovery, not in a public web toy.
LensCraft Lens Lab
Try the SAT Session Name Generator
Pick a sector, audience, and tone. The outputs are curated examples, not random word salad with a blazer on.
Loading generator...
The generator is a small public taste. The real lens design goes deeper with clients.
Some titles are deliberately blunt. In real campaigns, tone is agreed with the client and reviewed with people who actually understand the audience. The point is not shock. The point is memory, relevance, and behaviour that survives contact with a real working day.
Start crafting training your people will actually remember
Bring the roles, the risks, the humour, the awkward workarounds, and the bits people normally leave out of the policy conversation.
We will help turn them into a campaign that makes security feel like something people can actually use.