Questions, answered plainly.
What people ask us before they book a setup call, from what we train to how a session runs.
About Armourware
What is Armourware?
Armourware is a cybersecurity awareness company and part of Solveware (Pty) Ltd, South Africa. We run facilitated workshops for corporates and government agencies, in person and led by our own team. We teach staff at every level one habit: check the request before you act on it.
Do you sell security software or test our systems?
No. We train people. We don’t sell software, monitor networks or test systems. Our work is the human layer of security: the moment someone is asked to move money, data or access.
Who do you work with?
Corporates and government agencies, in South Africa and the rest of Africa. We train every level, from the front desk and frontline staff to the executive committee and the board.
What does the name mean?
Armour is protection a person wears. Ware is the old word for aware, from Old English wær, the same root as “beware”. Armourware is the armour of awareness.
The training
What is the A.W.A.R.E protocol?
Five steps anyone can remember when they are asked for money, data or access. Assess: name the ask. Wait: don’t act at their speed or inside their channel. Ask: check on a channel you choose, never a number or link from the message. Report: tell the right people within minutes, especially if you already acted. Expect: when you ask others for money, data or access, invite them to check you.
What attacks does the training cover?
The ones people receive every week: fake sign-in pages and links, fake IT support and one-time codes, calls from “the bank”, SIM swap and mobile money fraud, texts, WhatsApp messages and QR codes, cloned voices and deepfake video calls, changed banking details on invoices, requests for personal information, pasting work into free AI tools, and fake files and updates.
Do you teach people to spot fakes?
No. Fakes no longer look fake, and a cloned voice can sound exactly like your CEO. We teach people to verify instead: a call-back on a number they already have, or the app or address they always use. The check decides, not the eye.
How is this different from online awareness training?
People practise instead of watching. Every module is built from 20-minute scenario rounds with a fake request and a genuine one. Everyone votes privately, two people argue opposite calls, then someone makes the call-back out loud while the facilitator pushes back. Votes are anonymous and nobody is named or scored.
Is the training in person or online?
In person, led by our own facilitators, is the default for every package. Shield can run virtually on request for up to 20 people with cameras on. Role labs and leadership sessions run in person only.
Which languages do you train in?
English, and the protocol and Shield Site, our 90-minute session for frontline and shift workers, in your people’s home language. Tell us on the setup call which languages your teams speak.
Packages and logistics
Which package should we start with?
Leaders first. We recommend Helm, or the two-hour Board Briefing inside your board meeting, before training the rest of the organisation. Leaders are the face, voice and signature attackers copy, and their people need permission to check them.
How long are the sessions, and how many people can attend?
Shield is a half day (3 hours 20 minutes) for up to 30 people. Shield Site is 90 minutes. Gauntlet is one day (7 hours) for up to 16 people per role stream, with up to two streams. Helm is one day for up to 20 leaders. Full Armour runs over 6 to 10 weeks, and no group gives more than one day.
What happens after the session?
Everyone gets a wallet card with the rule and your IT, fraud line and Information Officer numbers. Three short nudges follow on days 2, 14 and 45, by email or opt-in WhatsApp. You receive a session report within five working days: how the room decided, the themes, and the process gaps we found.
Do participants get a certificate?
Everyone who attends a full session receives a certificate of attendance, and we keep attendance registers for your records. The certificate records attendance. It isn’t an accreditation or a qualification.
How do you measure whether it worked?
Every package ends with a session report. Full Armour adds a baseline before training, a re-check after 90 days and a one-page summary for your board. The number that matters most is how fast your organisation finds out about an attack.
Do you run phishing simulations?
Only for the Full Armour baseline and 90-day re-check, and only under strict rules. Your sponsor, HR and legal approve them in writing, and staff are told that simulations happen. Nobody is disciplined, named or ranked, and reporting counts as success, even after a click. We never impersonate real banks, SARS, the police or regulators, and we never use lures such as bonuses, retrenchments or medical news.
How do we get started?
Book a setup call: about 45 minutes with your sponsor and, ideally, IT, finance and HR. We map your numbers, processes and calendar, recommend the package that fits your risk, and set dates away from month-end and payroll.
Compliance and government
Does the training help with POPIA?
It supports your security duties under POPIA. The People data role lab trains HR, payroll and anyone holding staff or citizen data to share the minimum, through the approved channel, to a verified person, and leaders practise the decisions and notifications of the first 24 hours after an incident.
Do you train government departments and public officials?
Yes. We run sessions for every level, from front desk to executive committee, including officials who handle citizen data, and provide attendance registers and certificates of attendance for your records.
Assess the ask. Then ask.
Start with a setup call. We’ll recommend the package that fits your risk, and set dates away from month-end and payroll. Our advice: start with Helm or the Board Briefing, so your leaders go first.