Top 10 Cyber Security Training Providers in Australia

Phriendly Phishing is an Australian-based security awareness and human risk management provider built around a 'train not trick' approach. Its platform combines automated phishing simulations, bite-sized training developed locally for Australian and New Zealand audiences, personalised learning paths and PhishFit human risk scoring. It sells direct to organisations and through MSP and reseller partners.

Best for: Mid-sized to large Australian organisations that want a locally developed, fully managed phishing and awareness program with data kept onshore.

CanIPhish is a Queensland-headquartered security awareness platform offering email, website and AI-driven voice phishing simulations alongside gamified, animated training modules. It also includes AI-generated custom training, one-click phishing reporting from Outlook and Gmail, and AI analysis of employee-reported emails. A range of free tools, quizzes and templates is available on its site.

Best for: Small and mid-sized organisations, and IT teams, that want to start phishing simulation quickly with transparent, self-serve pricing.

CyberCX's Cyber Capability, Education and Training practice delivers organisation-wide cyber education, from board and executive cyber literacy and tabletop exercises to phishing awareness training using its own Australian-developed simulation product. It also offers SFIA-aligned micro-credentials, awareness briefings and technical training for operations, development and security teams. Separately, the CyberCX Academy recruits and trains entry-level cyber professionals.

Best for: Large enterprises and government agencies that want awareness training, board education and technical upskilling from one Australian cyber specialist.

Lumify Work, previously DDLS, delivers instructor-led and self-paced cyber security training in partnership with ISC2, EC-Council, ISACA, CompTIA, OffSec, PECB, Microsoft and AWS. Its catalogue runs from CISSP, CISM and ethical hacking courses to half-day cyber workshops for leaders and boards. It also offers Cyber for Everyone Australia, a self-paced awareness course for all staff.

Best for: Organisations building professional cyber skills in their IT and security teams, with an option for whole-of-staff awareness.

ALC Training is an Australia-based provider of instructor-led professional training, with a strong information and cyber security catalogue including CISSP, CISM, CISA, CRISC, CCSP, NIST Cybersecurity Lead Implementer and AI security courses. It also covers privacy (CIPP, CIPM, CIPT), governance and IT service management. Courses run regularly across Australia, New Zealand and South-East Asia.

Best for: Security, risk and privacy professionals pursuing recognised industry certifications through classroom-style training.

Cyber Aware is a Melbourne-built security awareness platform sold only through managed service providers. It combines white-labelled awareness training with more than 120 animated videos, phishing simulations with 100+ templates, and gap assessments mapped to the Essential Eight, ISO 27001 and NIST. MSPs run it across many client tenants under their own brand, with automated reporting.

Best for: Australian MSPs and IT providers that want to offer branded awareness training across their client base.

Secure Code Warrior provides hands-on secure coding training for developers, covering 75+ languages and 650+ real-world vulnerabilities, including the review of AI-generated code. It has expanded into security awareness for all employees and AI literacy training through its Citizen AI program. The platform integrates with IDEs, repositories and pipelines.

Best for: Organisations with in-house software teams that need developers to write and review code securely.

Safetrac is an Australian compliance training provider whose online course library includes cyber security awareness, cyber responsibility and working-from-home cyber security courses alongside privacy and other regulatory topics. Its platform manages training, policies, attestations and reporting, and courses can be customised to an organisation's brand and risks. A local team supports rollouts and compliance tracking.

Best for: Organisations that want cyber awareness delivered as part of a wider compliance and privacy training program.

KnowBe4 is a global security awareness and human risk management platform offering personalised training, phishing and vishing simulations, and human risk reporting. Its platform also extends into email security and real-time user coaching. It supports Australian customers through its Melbourne-based Australia and New Zealand office.

Best for: Larger organisations wanting a broad global content library and simulation platform with local ANZ support.