What is the CyberNut learning journey?
How We Train Your School Community to Spot and Stop Cyber Threats
CyberNut was built to protect schools by helping faculty, staff, and students recognize and report cyber threats.
Our training is hands-on, personalized, and powered by adaptive learning AI so every user learns at their own pace.
Phase I – Quick Onboarding
Goal: Get everyone ready to report phishing emails.
-
Takes just 30 seconds.
-
Users receive a welcome email with a link to an interactive tutorial showing how to report suspicious emails.
-
Once completed, they’re ready to start real-world phishing simulations.
Phase II – Basic Training
Goal: Learn to recognize different types of phishing attacks.
-
We train users on 8 types of cyber attacks:
-
Business Email Compromise
-
Deceptive URL
-
Malicious Attachment
-
Credential Harvesting
-
Tech Support Scam
-
Reward Scam
-
Brand Impersonation
-
Social Engineering
-
Each user starts with a Level 2 (medium difficulty) phishing email.
-
Depending on their action — clicking, reporting, or ignoring — the system automatically adjusts:
-
If they click → an easier Level 1 email is sent next.
-
If they report correctly → a harder Level 3 email is sent next.
-
This continues until users receive two simulations from each of the eight categories.
- Every person’s path is unique — nobody gets the same emails or difficulty level as someone else.
Phase III – Adaptive Learning
-
Goal: Focus on individual weaknesses to build stronger instincts.
-
After the first training rounds, CyberNut’s AI analyzes:
-
Which attack types each person struggles with most.
-
Their clicks, reports, and engagement patterns.
-
Then, the system creates a personalized training plan that targets each user’s weak spots.
-
For example, someone who struggles with reward scams might keep practicing that category, while another user who’s great at spotting them might move on to harder challenges.
The 5 Difficulty Levels Explained
CyberNut’s adaptive learning engine continuously adjusts difficulty based on user performance:
| Level | Description |
| Level 1 | Non-personalized emails with typos and bad branding (very easy to spot). |
| Level 2 | Personalized emails but still contain typos and poor branding. |
| Level 3 | Well-written, decently branded phishing emails — trickier to identify. |
| Level 4 | Highly personalized with good grammar, realistic branding, and insider details (e.g., names, events). |
| Level 5 | “ChatGPT-ified” hyper-personalized phishing content — highly convincing AI-generated messages. |
Over time, users can level up or down based on performance:
-
Spot and report → Level up 🔼
-
Fall for a phish → Level down 🔽
-
Every user’s journey is unique and adaptive, ensuring progress at the right pace for them.
The Result
By combining realistic simulations, adaptive difficulty, and personalized learning paths, CyberNut helps schools:
-
Strengthen cybersecurity awareness across all staff and students.
-
Create lasting behavioral change.
-
Build a culture of caution and confidence online.