Overview
Cypher is the gamified security awareness training built into the portal. It uses short, realistic scenarios to help you recognize phishing attacks and social engineering attempts — while earning XP, leveling up, and competing with your teammates.
Getting Started
- In the portal sidebar, under Security and Training, click Training Dashboard (
/portal/training, for example app.theonestack.com/portal/training, or the same path on your provider's custom portal address). - On the Security Training card, click through to open Cypher (
/portal/cypher). The card shows your season progress, and Continue under it opens your recommended episode. - Your Cypher dashboard shows your current level, monthly XP, streak, and any upcoming or scheduled scenarios.
- If a scenario is ready, click Start Session to begin. If no session is scheduled, you can still review your history, achievements, and the leaderboard.
Some providers also show a Security Training row directly in the sidebar. It opens the same page. If you don't see the Training Dashboard or the Security Training card, Cypher isn't turned on for your account yet. Ask your IT provider.
Sessions typically take 5–10 minutes. You can complete one whenever is convenient.
How a Session Works
Each session presents a realistic scenario — usually a simulated phishing email, a suspicious text message, a phone call, or a social engineering situation. You read through the scenario and answer multiple-choice questions about what you would do or what warning signs you notice.
At the end:
- You see your score for the session
- You earn XP based on how well you did
- A debrief explains the correct answers and why certain choices were right or wrong
The debrief is worth reading even when you score well — it reinforces the reasoning behind good security habits.
XP and Levels
Every completed session earns you XP. As your XP grows, you level up. Your current level is shown on your Cypher dashboard and on the leaderboard, and an XP bar shows your progress toward the next level.
Streaks
A streak tracks how many consecutive calendar months you've completed at least one training session. Maintaining a streak shows consistent engagement with security training. Milestones mark 3, 6, and 12 months.
Your current streak is shown on your Cypher dashboard. Missing a month resets your streak back to zero, so try to complete at least one session each calendar month.
Cypher awards streaks on a monthly cadence only. The weekly Security Culture score is a separate metric — it does not drive your streak.
Skill Domains and Weak Areas
Cypher tracks your performance across several skill domains — for example, phishing recognition, social engineering, password security, and safe browsing. If you score below the threshold in a domain, that area is flagged as a weak skill.
When you have weak skills, Cypher will serve you more scenarios in those areas to help you improve. Your dashboard shows which domains need attention.
Leaderboard and Achievements
Click the Leaderboard tab to see how your XP and level compare to your teammates. The leaderboard is organization-wide — you can see how everyone at your company is progressing.
Click Achievements to see milestones you've reached (such as completing your first session, reaching a level, or maintaining a streak) and what's still available to earn.
Frequently Asked Questions
I don't have a Start Session button. When do sessions appear?
Your IT provider schedules Cypher scenarios on a set cadence. If no session is showing, you're either between scheduled sessions or Cypher may not be fully enabled for your organization. Check back later or contact your IT provider.
Does completing Cypher sessions affect my Security Dashboard score?
Yes. Cypher training completion is factored into your organization's security posture score on the Security Dashboard. Completing your assigned training helps improve that score.
Can I retake a scenario to improve my score?
The debrief after each session explains the correct answers. New scenarios are delivered on schedule. Previous sessions are available to review in your History tab, but completed sessions cannot be retaken to change your score.
I'm on the leaderboard but my level hasn't updated.
Leaderboard and level updates happen after each session is completed and scored. If you just finished a session, give it a moment to refresh.
What if I want to opt out of Cypher?
Participation in security awareness training is typically required by your IT provider and may be part of your organization's security obligations. Contact your IT provider if you have concerns.