Overview

Awareness people finish, not awareness they skip.

The usual model is one long session a year: a slide deck, a sign-in sheet, and most of it forgotten by the next quarter. Attackers do not wait a year. They send a fake invoice on a Tuesday and a "CEO" WhatsApp on a Friday.

XcellSecure Security Awareness LMS replaces that with short, frequent, interesting lessons — animated videos, comic-strip stories, micro-lessons and quick quizzes — delivered in the language people think in and matched to what their job exposes them to. It is part of a people-security programme: train, test with a phishing simulation, and teach again where people slip.

Too longHour-long modules get skipped or left playing in a tab.
Too genericFinance, HR and developers face different lures.
Too rareOnce a year is not a habit. Little and often is.
Fromone 60-minute deck a year
Annual slide deck · 60 min
Toa 5-minute lesson every month
  1. Video6 min
  2. Comic4 min
  3. Micro3 min
  4. Quiz2 min
  5. Video5 min
  6. Comic4 min
Illustration
What's inside

Everything an awareness programme needs, in one place.

Content, delivery, tracking and evidence — so the people who run awareness spend their time on people, not spreadsheets.

Bite-size courses in four formats

Animated videos, comic-strip stories, micro-lessons and interactive simulations, each 3–10 minutes. Phishing, payment fraud, passwords, data handling, remote work and more.

Video Comic Micro-lesson Simulation

Indian languages*

English plus multiple Indian languages, including Hindi and Tamil, with audio and subtitles where available.

Role-based paths

Separate tracks for finance, HR, developers, IT admins, executives and front-line staff.

Quizzes & certificates

Short assessments after each module, a pass mark you set, and a certificate per learner.

Gamification

Points, badges, streaks and department leaderboards that make finishing a friendly contest.

Attention-aware video tracking

Videos pause when the learner switches away or goes idle, and progress only counts time actually watched. Every learner gets an individual progress report.

SCORM & xAPI

Upload your own SCORM 1.2 / 2004 or xAPI packages alongside the library.

Directory sync

Learners and departments sync from Microsoft Entra ID, Google Workspace or LDAP — joiners enrolled, leavers removed.

Auto-enrol after a phish

Click a simulated phish and a short course is assigned within minutes. See the flow.

Audit-ready reports

Completion by person, department and control, exported as PDF or CSV for ISO, PCI and regulator reviews.

Custom content

Your policies, logo, scenarios and people — produced as new modules or added to existing ones.

Social-engineering modules

Pre-built courses on phishing, vishing, smishing, BEC, deepfake calls and fake job offers.

Phishing simulation → training

Clicked the test phish? The lesson arrives while it still stings.

Connected to our Managed Phishing Simulation, the LMS turns a failed test into a short, relevant course — automatically, without anyone being named and shamed.

Simulated phish"Your parcel is held — pay ₹49"
Link clickedNo harm done — it was a test
Teachable moment60-second page: what gave it away
Course assigned"Delivery & UPI scams" · 5 min
Quiz passed4 / 5 · certificate issued
Report updatedDepartment risk view refreshed

Illustration. The phishing simulation is a separate service (from ₹299 per user per year, as on its page); the LMS link is included in the Professional plan.

Why teams choose it

Five things that make awareness easy to run.

  1. 01One-click libraryEvery format in one catalogue, filtered by topic, role, format and language.
  2. 02Campaigns, not one-offsSchedule monthly or quarterly campaigns with reminders and due dates.
  3. 03Learner analyticsCompletion, scores and time spent per person and department.
  4. 04Content that changesNew lures — UPI, deepfakes, AI tools — added as they appear.
  5. 05Topic-wise coursesSeparate tracks by topic and role, so nobody sits through the wrong course.
21 courses · 0 minutes in total Sample catalogue — final titles and languages confirmed at onboarding*
Guides

Short reads for people who run awareness.

Practical notes from our awareness and SOC teams. Each one opens the relevant answer or service.

Role-based trainingHow to build awareness paths by roleWhy finance, HR and developers need different courses — and how to set them up.Try the path builder → GamificationWhat actually sticks with employeesPoints and leaderboards help when they reward finishing and reporting, not speed.See the features → Awareness monthFrom a one-month campaign to everyday practiceTurn October's posters into a year-round rhythm of five-minute lessons.See how it works → CISO visibilityReporting human risk to the boardCompletion, report rates and repeat-clicker trends on one page.vCISO as a Service →
How it works

Five steps, repeated every month.

The same loop runs all year: learners get a little, often; admins see who is behind; weak spots get the next lesson.

Use cases

Built for the lures your people actually see.

Banks, NBFCs & fintech

Payment-fraud, BEC and customer-data modules with completion evidence for RBI and PCI DSS reviews.

BEC · UPI fraud · PCI 12.6

Brokers, AMCs & listed firms

Role paths for dealers, operations and leadership, with records that line up with SEBI CSCRF awareness expectations.

CSCRF · insider risk

Manufacturing & distribution

Hindi and regional-language lessons for plant, warehouse and dealer staff on shared or mobile devices.

Regional languages · mobile

Hospitals & healthcare

Patient-data handling, ransomware first steps and front-desk social engineering for clinical and admin staff.

DPDP · front desk

IT services & SaaS

Secure-coding and secrets-handling tracks for engineers, plus client-required training records for audits.

Developers · ISO 27001

Schools, colleges & SMBs

A ready library with almost no admin effort — we run the campaigns, you get a monthly summary.

Fully managed · low admin
How XcellHost delivers

We run the programme. Your people just learn.

Platform, content, campaigns and reporting are handled by XcellHost's security awareness team in Mumbai.

Set-up in days

Directory sync, single sign-on, branding, departments and the first campaign configured by our team.

01
A 12-month calendar

A campaign plan by month and role, built around your risks, audits and festive-season fraud peaks.

02
Completion chasing

Reminders to learners, escalations to managers and a weekly list of who is overdue.

03
Language & local context

Indian examples — UPI, courier, KYC and job-offer scams — in the languages your staff prefer.*

04
Monthly report & audit pack

One-page summary for leadership plus the evidence auditors ask for, mapped to controls.

05
Backed by our 24×7 SOC

Lessons draw on lures our SOC sees every week, so content keeps up with real attacks.

06
Compliance mapping

Training records mapped to the clause.

The LMS helps you meet the awareness parts of these frameworks with tracked training and exportable evidence. We are not a regulator or law firm; confirm what applies to your entity with your compliance team.

DPDP s.8(5)DPDP Act 2023 & Rules 2025

Data fiduciaries must protect personal data with reasonable security safeguards (section 8(5); Rule 6 of the DPDP Rules 2025). Staff who handle personal data well are part of those safeguards — the LMS records who was trained, on what, and when.

6 hCERT-In directions (April 2022)

Specified cyber incidents must be reported to CERT-In within 6 hours of being noticed. That only works if staff recognise and report incidents fast. Our "reporting an incident" module teaches who to tell, how and how quickly.

RBIBanks & NBFCs

RBI's Cyber Security Framework for banks (June 2016) lists user, employee and management awareness among its baseline controls, and its 2023 IT governance Master Direction expects ongoing training. The LMS gives you the programme and the record.

SEBI CSCRFSecurities market entities

SEBI's Cybersecurity and Cyber Resilience Framework (August 2024) includes awareness and training requirements for regulated entities. Role-based paths and completion reports support them; check the requirements for your category.

MeitY · DPDPConsent & notice basics

Short modules explain consent, notices and data-principal rights in plain words for HR, sales and support staff. Pair with our vDPO service for the privacy programme itself.

RecordsEvidence in India

Completion, quiz and certificate records export as PDF and CSV for auditors and regulators. Data residency options are confirmed in the quotation.*

A.6.3ISO/IEC 27001:2022

Annex A control 6.3, "Information security awareness, education and training", asks that personnel get appropriate awareness and regular updates on policy. See our ISO 27001 readiness service.

12.6PCI DSS v4.0.1

Requirement 12.6 covers a formal awareness programme, training at hire and at least every 12 months, and (12.6.3.1) phishing and social-engineering topics. See our PCI DSS service.

SP 800-50r1NIST learning programmes

NIST SP 800-50 Rev. 1 (September 2024) describes how to build a cybersecurity and privacy learning programme. Our plan → deliver → measure loop follows the same structure.

CIS 14CIS Controls v8

Control 14, "Security Awareness and Skills Training", covers a programme, role-specific training and recognising social engineering. Role paths map to its safeguards.

SCORM · xAPIe-learning standards

SCORM 1.2, SCORM 2004 and xAPI packages from your own HR or compliance teams can run and report alongside the library.

NeutralCertificates

LMS certificates record course completion. They are not professional certifications, and we are not affiliated with any certification body.

References checked November 2026 from MeitY, CERT-In, RBI, SEBI, ISO, PCI SSC, NIST and CIS publications, for orientation only — not legal advice.

Plans

Priced per learner, per year.

Managed by XcellHost, platform included. Minimum 25 users. Pair with phishing simulation at the same prices as on its page.

Essentials4 campaigns / yr
₹199/ user / year*
Indicative — confirm with XcellHostSMBs starting a programme
  • Full library · videos, comics, micro
  • Quizzes & certificates
  • English & Hindi*
  • Quarterly campaigns with reminders
  • Completion reports (PDF / CSV)
Most chosen
Professional12 campaigns / yr
₹399/ user / year*
Indicative — confirm with XcellHostRegulated & growing teams
  • Role-based learning paths
  • Leaderboards, badges & streaks
  • Multiple Indian languages*
  • Entra ID / Google / LDAP sync
  • SCORM & xAPI uploads
  • Auto-enrol from phishing simulation
  • Audit pack mapped to controls
Enterprise1,000+ users
On quotegroup & multi-entity
Large and regulated groups
  • Multiple entities & portals
  • Custom module production
  • HRMS / SIEM data export
  • Named awareness manager
  • Board & leadership sessions
Phishing simulationAs on its page₹299 / ₹599per user / year · Essential / Pro
SMS & voice moduleOTP, payment & call-back lures₹99per user / year
Baseline assessmentFirst campaign + report₹9,999one-time
Leadership & finance BEC workshopOnline · up to 20 people₹19,999per session
Custom course moduleYour policy or scenario₹49,999*per module · indicative — confirm with XcellHost
Extra language versionPer course, per language₹14,999*per course-language · indicative — confirm with XcellHost

* Indicative — confirm with XcellHost. INR, excluding 18% GST, minimum 25 users. LMS plan, custom-module and language prices are placeholders until your quotation. Phishing simulation, SMS & voice module, baseline assessment and BEC workshop prices are the list prices on our Managed Phishing Simulation page. Language availability varies by course.

Configure

Learners, plan and add-ons. One rupee total.

Lines go to the cart at the prices shown. Annual items are billed per user per year; workshops and modules once.

1 · LMS plan
3 · Phishing simulation as on its page
Monthly campaigns; clickers auto-enrolled in the LMS.
4 · Add-ons
Your estimate · indicative

Professional · 200 learners

    Per year₹0
    One-time₹0
    Subtotal₹0
    GST (18%)₹0
    First invoice incl. GST₹0
    Per learner / month (excl. GST)₹0
    * Indicative — confirm with XcellHost. INR excl. 18% GST. Phishing, SMS & voice, baseline and workshop prices as on our Managed Phishing Simulation page.
    Tool · training time & ROI estimator

    What does awareness cost in hours?

    Compare the hours your current approach takes with a bite-size programme, plus admin time saved by automation. Illustrative — every assumption and the formula are shown.

    Bite-size plan · minutes per learner per month
    Campaigns per year
    LMS plan
    Illustrative estimate · per year
    Net value₹0
    ROI0%
    Hours freed0
      LMS cost (users × plan)₹0
      Admin hours saved0 h
      Formula learning hours = users × (current h − minutes × 12 ÷ 60) admin hours saved = users × campaigns × (3 − 0.5) min ÷ 60 · assumption: 3 min manual tracking per learner per campaign, 0.5 min with the LMS ROI = (hours freed + admin hours) × ₹/h − LMS cost, ÷ LMS cost · LMS cost = max(25, users) × ₹199* or ₹399*
      Illustrative only. Counts time and admin effort; it does not claim a reduction in incidents. Figures use the indicative prices on this page, not a quotation.
      Tool · course-path builder

      Pick a role. Get its learning path.

      Choose the role and what the job involves. The builder recommends modules from the sample library, in order, with time and the controls they support.

      Role
      The job involves
      Language
      Recommended path · sample

      All staff

      Modules0
      Total time0 min
      Pace—

        Compare

        Annual slide deck, a self-run LMS, or a managed one.

        What you getAnnual classroom / deckLMS you run yourselfXcellHost Awareness LMS
        Time per learner1–3 hours in one sittingDepends on the courses you buy3–10 minute lessons, monthly
        LanguageUsually English onlyWhatever the content vendor offersEnglish plus multiple Indian languages*
        RelevanceSame deck for everyonePaths if someone builds themRole paths for finance, HR, developers, executives
        After a failed phishNothing until next yearManual follow-upCourse auto-assigned within minutes
        Chasing completionEmails from HRYour admin's spare timeReminders and escalations run by XcellHost
        Audit evidenceSign-in sheetsExports you assembleReport mapped to ISO A.6.3, PCI 12.6 and more
        Cost modelTrainer days + lost hoursLicences + admin timeFrom ₹199* per user per year, managed

        * Indicative — confirm with XcellHost. Comparison describes typical approaches, not specific vendors.

        How to start

        From first call to first certificate.

        1. 01Discovery callHeadcount, roles, languages, regulator and audit dates.Day 0
        2. 02Fixed proposalPlan, add-ons, calendar and price in INR.Within 2 business days*
        3. 03Connect & brandDirectory sync, SSO, logo, departments.3–5 days*
        4. 04BaselineShort starter course and, if chosen, a baseline phish.Week 2
        5. 05Monthly campaignsRole paths, reminders and leaderboards go live.Month 1 onward
        6. 06Report & refineMonthly summary, audit pack, next quarter's topics.Every month