RuleCrest
ScrubMyPII
Reduces each employee's personal exposure on data-broker sites, the raw material for phishing and social engineering.
Add-ons
Other tools, opened from the same dashboard
Training is one part of a privacy and security programme. RuleCrest can launch separate apps that an organization has bought, so people reach them from the place they already sign in, with nothing new to remember.
The products
Four add-ons for the people behind the training
Training changes what people know. These tools protect what attackers go after: personal details, work logins, the inbox and the paperwork. Select one to see what it does and why it helps.
Coming soon
BreachMon
Breach monitoring for work emails. It pairs with ScrubMyPII: one removes broker listings, the other watches for leaked logins.
Coming soon
PhishSim
Phishing tests with a one-click Report phish button, the natural next question after awareness training.
Coming soon
PolicyMgr
A policy hub with employee attestation that pairs with RuleCrest certificates as one evidence pack.
How it works
Entitled, launched, verified
Entitled per organization
A platform operator registers an add-on once and entitles each organization that bought it, with an optional seat count and access window. An organization that has not bought it sees no tile.
One click, no second sign-in
Tiles appear on the learner's dashboard. A click asks RuleCrest to launch the app, which sends the person there with a signed token that says who they are and which organization they belong to.
Verified by the add-on
The token is signed with an Ed25519 key whose public half is published, lasts 60 seconds, and can be used once. The add-on checks it itself; no shared secret is exchanged.
Privacy by design
What an add-on receives, and what it does not
- An opaque identifier for the person that is stable for that add-on and organization, and that is not a RuleCrest database id.
- The organization, the person's name and email, their role (learner or administrator) and the seat count the organization bought.
- Nothing about their training results. A launch never changes anything in a person's training record.
The full contract, including how to verify the token and a small reference add-on, is published with the product for anyone building one.
Ready to look around?
Sign in to your organization, or browse what the platform teaches.