Nimblr FAQ

Human risk management is the practice of identifying, measuring and reducing the security risks caused by human behavior

Security awareness training teaches people to recognize cyber threats, fosters lasting behavioral change and reduces the risk of successful IT attacks.

Security awareness training focuses on changing human behavior of all employees to prevent people-related cyber risks. IT security training targets technical staff and emphasizes system configuration, infrastructure, and threat mitigation from a technical perspective.

We offer adaptive security awareness training based on real behavior and current threats. With phishing simulations, instant feedback, and automated updates, users receive security training based on their risk profile and previous interactions. 

Security awareness training reduces human risk, the leading cause of cyber incidents, by teaching users to recognize and avoid threats.

Training should be continuous, with the frequency of courses and simulations adapted to each user’s role and needs.

Our training is continuously updated to reflect current threats and covers key human-related risks such as phishing, social engineering, AI usage, password hygiene, credential theft and safe browsing.

Our solution includes adaptive, role-based training modules and simulations, phishing reporting in the email client, an intuitive dashboard, automated reporting, detailed onboarding, and continuous support.

Nimblr offers expert-designed training that drives real behavioral change. Nimblr is fully automated and trusted by thousands of organizations to reduce human risk and build a strong security culture.

Everyone in an organization who has an email address can use Nimblr.

More than 30 languages are currently supported. 

Micro Training consists of concise, personalized five-minute lessons on topics like phishing, AI, ransomware, and safe browsing what are tailored to each user’s behavior and role. 

Instant Learning provides immediate, personalized feedback when someone interacts with a phishing or smishing simulation. 

A simulated phishing SMS that mimics real-world tactics deployed by scammers. This helps build security awareness and demonstrates the importance of taking care when interacting with text messages. 

Simulated attacks are automated phishing and smishing tests tailored to each user’s behavior and role. They are designed to appear and behave like real phishing attempts.

Our simulations are highly realistic, continuously updated with real-world threats, customized and personalized using organization-specific data.

Yes, you can create customized content within the Nimblr platform, such as IT security policy courses. 

Yes, you can use your organization’s brand, terminology and organization-specific data in the courses and simulations.

Training is delivered continuously and automatically, based on each user’s role and previous behavior.

Once you have signed on as a Nimblr organization, one of our Nimblr onboarding specialists will guide you through every step, ensuring a smooth setup.

Behavioral change is when someone turns knowledge into action. Through tailored training and real-time feedback, Nimblr helps reduce risky behaviors. 

Behavioral change goes beyond awareness and focuses on how people act. Nimblr replaces one-off lessons with continuous, personalized learning and realistic simulations that build lasting habits.

We use data-driven personalization, instant feedback, realistic simulations, and continuous reinforcement to create habits that reduce risk over time.

You can track progress through Nimblr’s unique Awareness Level, which is based on user behavior and training outcomes. Automated monthly reports provide clear, actionable insights.

Nimblr was founded in 2019 in southern Sweden by Andreas, Karl, Rikard, Aron, and Martin. They are all experts in cybersecurity and e-learning, who joined forces to tackle human risk in IT security.

We work with both public and private sector organizations, from schools and municipalities to small and mid-sized companies and enterprises. We also support MSPs and IT providers with scalable training programs.

We monitor threat intelligence and attack trends through reputable sources and our own honey pots. Our expert team ensures training content remains relevant, actionable, and aligned with real-world risks.

Permission requirements may vary depending on how you use the platform, but we always request only the minimum permissions necessary to provide our services. We practice what we preach, your security is our priority. 

Admin rights are assigned by your organization. You decide who can manage training, view reports, and configure settings.

Yes, Nimblr supports single sign-on through commonly used identity providers, making access secure and seamless. 

Phishing simulations are delivered after whitelisting during the onboarding. This way you do not need to compromise the security of your established security measures.

Yes, continuous security awareness training is a key element of data security compliance. Read more about how Nimblr can support your compliance requirements. 

 Yes, we offer courses in all of the major compliance regulations, adapted to users' roles and risk levels.  

Yes, all user data can be deleted upon request. 

No, customer information is never shared with any third-party sources. We are fully committed to protecting our customers’ data privacy and confidentiality.

We use a selection of AI providers for limited, non-sensitive purposes, including: 

- OpenAI

- Anthropic

Yes. AI is used to generate and translate course content within our content platform. Course drafts are produced by an AI model and then reviewed and approved by our content team before publication. AI also assists with refining, reviewing, importing, and translating content to ensure quality, consistency, and broad language coverage across the more than 30 languages we support. All AI-generated content passes through automated safety guardrails and human review before it reaches learners. 

Yes. AI is part of how we build and translate the training content delivered in the platform, using established AI providers (Anthropic for generation, OpenAI for content moderation). For customers on the standard product, this AI usage relates to content production and end-user and customer personal data is not sent to these AI providers as part of the core service. 

We use AI agents to assist our support team in providing high-quality service and support to Nimblr customers.