Training feels passive
People click through modules without ever making a decision under pressure.
Cybersecurity Awareness Month ideas
Security awareness employees actually want to join
A virtual, team-based cybersecurity escape room. A ready-made tactic for Cybersecurity Awareness Month.
What is CyberEscape Online?
CyberEscape Online is a fully virtual, team-based cybersecurity escape room used for Cybersecurity Awareness Month, new hire onboarding and annual security training. Teams of 1 to 15 players choose a storyline, solve cybersecurity puzzles against the clock, and compete on a leaderboard.
Change Champions Consulting is a Living Security partner. We handle the setup, communications and reporting so your team can focus on running a campaign people talk about. Looking for the wider programme view? See our CyberEscape Online overview and human risk programs.
Key facts
- Fully virtual, team-based cybersecurity escape room
- Teams of 1 to 15 players, sessions from 15 to 90 minutes
- Multiple storylines including deepfake and AI threat scenarios
- Includes registration portal, reporting and leaderboard
- Entry pricing from $7.50 USD per user per year, unlimited sessions
The problem
Why standard security awareness training stops working
Engagement fades fast
Attention drops within minutes of a compliance video starting.
It is not memorable
By the time a real phishing attempt lands, the lesson is long gone.
It feels irrelevant
Generic content rarely looks like the work people actually do.
Built for the 2026 Cyber Month theme
Your best defence is you
The 2026 Canadian Cyber Security Awareness Month theme is "Your best defence is you," focused on AI-generated scams and phishing that look more convincing than ever. Our newest storyline, Trust No One, puts employees inside exactly that scenario.
Read the Get Cyber Safe campaign detailsTrust No One
At Meridian Financial, a deepfake voicemail and urgent payment request nearly trick an employee into transferring company funds. Coworkers retrace the attack to uncover how AI-powered deception and public information made the scheme so convincing.
- Topics
- Deepfakes, business email compromise, prompt injection, oversharing, privileged access, MFA, incident response, social engineering
- Length
- 30, 45 or 60 minutes
- Audience
- General end user
Storyline library
Virtual escape room security training, one storyline at a time
Choose the storyline that fits your audience, your run time and the behaviours you want to change.
Born Secure: Entrance Exam
15 to 60 min
Physical security, vishing, phishing, BEC, passphrases, incident response
Watch the trailerBorn Secure: Webb of Lies
30 to 45 min
OSINT, social media privacy, passwords, public Wi-Fi, physical security
Watch the trailerSecure My Life Now
30 or 45 min
Passphrases, remote and home security, removable media, privacy
Watch the trailerCybersecurity Tonight
15 to 85 min
Passphrases, MFA, ransomware, phishing, mobile security, social engineering
Watch the trailerThe Cyber Race
60 to 85 min
Digital identity, crypto scams, deepfakes, metaverse privacy
Watch the trailerWhat is included
- Sessions for 1 to 15 players
- Flexible length from 15 to 90 minutes
- Multiple selectable storylines
- Online registration portal
- Full reporting access and leaderboard
- Supplied communications and promotional materials
- Unlimited sessions per year across different campaigns
Experiential learning drives 16x more retention than standard training approaches.
October playbook
Cybersecurity Awareness Month activities, planned week by week
- 1
Week 1
Choose storyline and dates
- 2
Week 2
We set up your registration portal and communications
- 3
Week 3
Invite teams and promote internally
- 4
Week 4
Run sessions, publish leaderboard, review reporting
Pricing
From $7.50 USD per user per year
Entry pricing starts at $7.50 USD per user per year, with volume discounts. Includes unlimited sessions for the year plus Change Champions onboarding, communications templates and reporting support.
Unlimited sessions per year
Live webinar
Cybersecurity Awareness Month Ideas: A Live Look at CyberEscape Online
Wednesday, September 30, 9:00 to 9:45 AM PT, 45 minutes
Join us the day before October begins for a live look at how a session runs, our newest deepfake storyline, and the reporting your security team gets back. Book by October 3 and we can still run your sessions in October. Cannot attend live? Register anyway and we will send you the recording.
Save my seatFree pilot
Request a free pilot session
Run a no-cost session with your security champions and see engagement firsthand before you commit.
FAQ
Team-based security training, answered
What is CyberEscape Online?
CyberEscape Online is a fully virtual, team-based cybersecurity escape room. Teams of 1 to 15 players choose a storyline, solve cybersecurity puzzles against the clock, and compete on a leaderboard. Organizations use it for Cybersecurity Awareness Month, new hire onboarding and annual security training.
How long does a session take?
Sessions run from 15 to 90 minutes depending on the storyline you choose. Shorter formats fit a lunch-and-learn or a team meeting, while longer formats work well as a flagship Cybersecurity Awareness Month activity. You pick the length when you book the session.
How many people can play at once?
Each team has 1 to 15 players, and you can run as many teams in parallel as you need. Large organizations run concurrent sessions across departments and time zones during an awareness campaign, with every team appearing on the same leaderboard.
Is it fully virtual?
Yes. CyberEscape Online is fully virtual. Players join from a laptop or desktop using a browser and the video conferencing tool your organization already uses, so distributed and hybrid teams take part on equal footing with no travel or room booking.
Can we use it for Cybersecurity Awareness Month?
Yes, and it is one of the most requested Cybersecurity Awareness Month activities we run. You get a registration portal, promotional materials and a leaderboard, so October becomes a campaign employees talk about rather than another mandatory training reminder.
Does it replace our annual security training?
It complements annual security training rather than replacing your compliance requirement. CyberEscape Online drives engagement, recall and team discussion around real attack scenarios, which makes the formal training your organization must deliver land far better.
What reporting do we get?
You get full reporting access plus a leaderboard covering participation, teams, completion and session performance. Security and L&D leaders use it to show engagement across departments and to compare results between campaigns throughout the year.
How long does setup take?
Setup typically takes about two weeks. Week one is choosing your storyline and dates, week two is portal and communications setup, then you promote internally and run sessions. Book by October 3 and we can still run your sessions in October.
How much does it cost?
Entry pricing starts at $7.50 USD per user per year, with volume discounts. That includes unlimited sessions for the year plus Change Champions onboarding, communications templates and reporting support, so you can run several campaigns on one licence.
How do we get started?
Join the live webinar on September 30 or request a free pilot session with your security champions. We will help you choose a storyline, set your dates, and set up the registration portal and communications before your first session goes live.