Frequently Asked Questions

Doubleflow provides interactive cybersecurity awareness games and campaigns for employees – centered around our signature virtual escape room, Beat the Hacker®. Our experiences are designed to make cybersecurity engaging, memorable and fun — whether you’re planning Cybersecurity Awareness Month, running a company-wide awareness campaign, hosting a security event or road show or simply looking for a fresh way to engage employees.

Beat the Hacker® is an interactive cybersecurity escape room for employees. Players take on a series of short cybersecurity challenges covering real-world threats such as phishing, smishing, passwords, MFA, deepfakes and AI voice cloning.

It can be played individually or in teams and is available in formats ranging from short 5-minute campaign activities to a 30-minute team experience.

Yes. Beat the Hacker® was designed to turn cybersecurity awareness into something employees actually want to participate in. Companies use it as a flagship Cybersecurity Awareness Month activity, a company-wide competition, a team event or as part of a wider month-long campaign.

The combination of interactive challenges, storytelling and competition helps create buzz around cybersecurity while reinforcing important security messages.

We offer three flexible formats to match your event structure:

• 15-Minute Individual Campaign: The standard turn-key format for company-wide rollouts during Cybersecurity Awareness Month, allowing employees to complete the challenge at their own pace.

• 30-Minute Team Escape Room: Designed for collaborative group play, where remote, hybrid, or in-person teams work together over Microsoft Teams/Zoom or in meeting rooms to beat the clock.

• 5-Minute Roadshow / Kiosk Challenge: A rapid, high-energy version ideal for town halls, live event booths, or executive workshops.

Absolutely. Our games can be used for security awareness weeks, phishing campaigns, AI awareness initiatives, data privacy campaigns, annual refresher activities, employee events, roadshows and other cybersecurity initiatives throughout the year.

Campaigns can focus on one specific risk or combine several cybersecurity topics.

Beat the Hacker® covers modern, real-world attack vectors, including:

• Phishing
• Smishing
• Passwords and access
• MFA Fatigue and MFA Bombing
• AI voice cloning
• Deepfakes
• Shadow AI
• Social engineering
• LinkedIn and social media scams
• Data privacy
• Invoice fraud
• Physical security and tailgating
• Remote working
• QR codes
• Personal cybersecurity

We continuously develop new scenarios to reflect how cybersecurity threats are changing.

Yes. Our experiences are specifically designed for regular employees rather than cybersecurity specialists. The challenges use relatable situations, visual storytelling and problem-solving rather than technical terminology. The goal is to make cybersecurity approachable and interesting while reinforcing practical security behaviours.

Both. For company-wide awareness campaigns, employees can complete the experience individually and compete against colleagues on a leaderboard.

For team events, participants typically play in small groups, working together to solve the challenges.

This makes Doubleflow suitable for everything from global awareness campaigns to interactive team-building sessions.

Yes. Selected campaign formats can be distributed through a direct link or integrated into an LMS using SCORM.

If you have specific technical or LMS requirements, contact us and we’ll recommend the best setup.

Because Beat the Hacker® is fully turn-key, most organizations launch their campaign in under 48 hours. There is no complex software installation or months of custom content build. You can select your preferred game edition and launch immediately.

Custom content and more extensive branding may require additional lead time.

Yes. You can use our ready-made experiences or customize them to better fit your organization.

Customization can include your logo, brand colours and imagery as well as changes to challenges, cybersecurity topics, internal policies and learning messages.

We can also create more extensively tailored campaigns for organizations with specific requirements.

No. Doubleflow is browser-based, so there is no software to install.

Participants normally access the activity through a simple link or QR code and can start playing immediately on a computer, tablet or smartphone, depending on the activity. This makes company-wide rollouts quick and minimizes the involvement required from IT.

Yes. Doubleflow is designed for distributed organizations and can scale from a small team to a global workforce.

Campaigns can be rolled out across offices, business units and countries, with employees participating remotely, in person or through a combination of both.

We can also support campaigns in multiple languages.

If using Doubleflow’s hosted platform, administrators get access to a real-time analytics dashboard tracking completion rates, score distributions, and department leaderboards. If using SCORM, progress syncs automatically into your LMS.

Every Beat the Hacker® license includes a Turn-Key Internal Promo Kit:

• Promo video

• Pre-written announcement and reminder email sequences.

• Teaser posts and graphics to distribute across Slack, Teams etc.

• Real-time company leaderboard.

Beat the Hacker® has been played by more than 500,000 corporate participants worldwide.

The experience has an average player rating of 4.6 out of 5 and a 97% recommendation rate.

Organizations use Beat the Hacker® for Cybersecurity Awareness Month, company-wide campaigns, team events and security awareness initiatives around the world.

Yes. You can create a free Doubleflow account and get instant access to selected games. No credit card is required. Visit https://www.doubleflow.com/sign-up/ to get started.

Beat the Hacker® is sold as an event or campaign license based on your total employee count or participating user tier. You pay once for the campaign period, with full access to the escape room, promotional kits, and analytics dashboard.

Pricing depends on the experience you choose, the number of potential participants and how long you want the campaign to remain available. We offer options ranging from small team events to campaigns for thousands of employees.

Visit our Pricing page for current pricing or contact us for larger or customized rollouts.

Yes. Doubleflow provides participation and completion data that can help organizations document cybersecurity awareness activities. Many organizations use our campaigns alongside their existing compliance, security awareness and cyber insurance programs.

Specific regulatory and compliance requirements vary, so Doubleflow should be considered part of your wider cybersecurity awareness program rather than a standalone compliance solution.

Traditional security training focuses on passive viewing, which leads to low engagement and quick forgetting. Beat the Hacker® focuses on active problem-solving. Employees step into the shoes of security investigators, cracking puzzles and exposing attacks like deepfakes, AI voice cloning, and social engineering. This interactive approach encourages active participation and makes cybersecurity messages more memorable than passive training alone.

Not necessarily. Many of our customers already have traditional security awareness training or phishing simulation platforms in place and use Doubleflow as an engagement layer on top of that. Doubleflow is designed to add something different: memorable, interactive campaigns and experiences that create excitement around cybersecurity and help engage employees who may be tired of conventional training.

That makes Doubleflow particularly useful for Cybersecurity Awareness Month, awareness campaigns, employee events and other high-visibility security initiatives.

KnowBe4 and Doubleflow are designed for different parts of the security awareness program. KnowBe4 focuses heavily on continuous awareness training, compliance and phishing simulations, while Doubleflow specializes in high-engagement cybersecurity campaigns and interactive experiences.

Many organizations therefore use Doubleflow alongside their existing awareness platform — particularly for Cybersecurity Awareness Month, company events, roadshows and annual refresher campaigns.