- BFSIBanking, Financial Services & Insurance
- IT & ITESIT services, BPM, GCCs & SaaS
- Retail & e-commerceStore chains, D2C brands & marketplaces
- HealthcareComing soon
- ManufacturingComing soon
Aquila I CASA (Cyber Attack Simulation & Awareness)
The message arrives by SMS, not email. Your annual training never mentioned that — Aquila I CASA sends safe phishing lures by email, SMS and QR code, gives anyone who clicks an instant micro-lesson, and scores human risk by employee, group and organisation — with the Cyber Awareness training LMS folded in.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Aquila I platform family
This page covers Aquila I CASA — with Aquila I Cyber Awareness, the training LMS, folded in. The rest:
Quick facts
30-second orientation- Product
- Phishing and social-engineering simulation with a security awareness training LMS (Cyber Awareness)
- Maker
- Aquila I Solutions Pvt. Ltd., Thane (Mumbai Metropolitan Region); founded 2020, no outside funding reported (Tracxn)
- Channels
- Email, SMS and QR code simulations, plus vishing, smishing, ransomware and messaging-attack modules
- Training
- User Behaviour → Train → Assess → Accredit, in videos, games, interactive videos, decks, infographics and posters
- Price
- Quote-only; no published price, no INR list, and the licence meter (per user or per campaign) is not stated
- Deployment
- Cloud-native SaaS with 24×7 support, by Aquila I’s account; an on-premises option is not documented
- Not a filter
- CASA simulates, trains and measures; it does not block or remove real phishing mail
- Proof
- No named customer case studies; Aquila I’s own 2022 videos show awareness workshops it ran with UTI and RPG
- India
- Indian company, but where staff names and click data are stored is not published; languages are not listed
- In India via
- TechBag — scoping your user groups and channels, quote in INR with GST, first campaign support
Understand attack simulation and awareness training before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is attack simulation and awareness?
It sends safe, realistic lures to your staff, then trains and measures the people who fall for them.
An annual slide deck vs Aquila I CASA — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | An annual slide deck | Aquila I CASA (Cyber Attack Simulation & Awareness) |
|---|---|---|
| Channels tested | Email only, once a year | Email, SMS and QR code, plus voice modules |
| After a click | A warning email nobody reads | An instant micro-lesson and a retest |
| Training | One annual slide deck for all | Role-based courses, assessed and accredited |
| Measurement | Completion percentages | Risk scores by employee, group and organisation |
| Board reporting | Spreadsheets from two vendors | One CISO dashboard with department breakdowns |
| What it is NOT | — | A mail filter, or a published price |
The cheapest test is one baseline round across two channels: record click and report rates by department, then decide on the programme.
The four pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Templates
Campaigns start from a library of attack templates or a bespoke scenario mirroring attacks on your industry, with branded landing pages for link and credential-harvesting tests.
Targeting
Targets are segmented by department, role or risk level, and each campaign is sent by email, SMS or QR code, so the same lure can be tested on more than one channel.
Training LMS
A failed test triggers instant micro-training, and the Cyber Awareness LMS assigns role-based courses through its User Behaviour, Train, Assess and Accredit cycle.
Dashboards
Campaign data becomes risk heatmaps and risk scores by employee, group and organisation, beside a CISO dashboard of completion rates and department breakdowns.
Templates, targeting, training and dashboards in one SaaS platform — no part of it sits in your mail flow, and the hosting region is not published.
Nine capabilities. Simulate, train, measure.
Aquila I CASA tests your people on the channels attackers use — then trains and measures the ones who fall for it.
Library or bespoke lures
Choose from a library of attack vectors or build a bespoke scenario that mirrors real campaigns aimed at your industry.
Email, SMS and QR code
Simulations go out by email, SMS or QR code, segmented by department, role or risk level, for coverage beyond the inbox.
Voice, SMS and ransomware
Modules cover email phishing, ransomware-style urgency attacks, vishing and smishing, and attacks over messaging platforms.
A lesson at the moment of failure
A compromised simulation triggers instant micro-training, and reinforcement tests are scheduled to check the lesson held.
Role-based training in six formats
Videos, gamified modules, interactive videos, presentations, infographics and posters, aimed at each role’s real gaps.
Assess, then accredit
Staff are assessed on what they learned and accredited on completion, with gamified rewards and custom reminders to finish.
Employee, group, organisation
Risk is scored for each employee, each group and the whole organisation, so you can track where you stand over time.
Where the weak spots are
Granular campaign data becomes risk heatmaps that pinpoint vulnerable groups and show resilience trends from one round to the next.
One page for the board
A CISO dashboard brings risk scores, completion rates and department breakdowns together, with training reports at every level.
Watch Aquila I CASA and its awareness workshops
Three videos from Aquila I’s official channel, all from 2022: the product video, then two highlight reels from awareness workshops it ran during Cybersecurity Awareness Month.
Aquila I Cyber Attack & Cyber Awareness Product Video
A 2:11 product video from 2022 on training staff against phishing and ransomware with Aquila I’s awareness programme.
Aquila I Cybersecurity Awareness Workshops- Phase 1
Highlights of the awareness sessions Aquila I ran for Cybersecurity Awareness Month in October 2022, phase one.
Cybersecurity Awareness Workshops Phase 2
The second phase of the same 2022 workshop series: in-person awareness sessions, not a product demonstration.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Attackers phish by SMS, QR code and phone. Aquila I CASA tests your people on all of them.
Here’s what genuinely sets it apart — and exactly where it stops.
Tests beyond the inbox
Indian staff are phished by SMS, WhatsApp-style messages, QR codes and calls as often as by email. CASA sends simulations by email, SMS and QR code and lists vishing, smishing and messaging-platform modules, so a programme can test the channels attackers in India actually use, not only the corporate mailbox.
Simulation and LMS in one place
A failed test triggers an instant micro-lesson, reinforcement tests follow, and the Cyber Awareness LMS runs role-based courses through User Behaviour, Train, Assess and Accredit. Risk scores by employee, group and organisation feed a CISO dashboard, so the board sees one number rather than two vendors’ reports.
An Indian vendor that also runs workshops
Aquila I is a Thane company, and its own 2022 videos show awareness workshops it ran on-site and online during Cybersecurity Awareness Month, including sessions with UTI and RPG. Those were workshops, not product deployments, but they show a vendor that will put trainers in a room as well as a platform.
Where it stops
CASA is not a mail filter and will not stop a real phish. Training languages, template count, report-phish button, directory sync and LMS export are not documented. The price, licence meter and hosting region are not published, and Aquila I publishes no named customer case studies. Ask for each in writing.
The numbers behind the platform
What your Aquila I CASA rollout looks like
Map people and channels
List departments, roles and high-risk groups, and decide which channels to test: email, SMS, QR codes, calls or messaging apps.
Settle data and languages
Get the hosting region, training languages and how users are loaded in writing, then allow-list simulation mail with IT.
Run a baseline round
Send one unannounced simulation across two channels and record click and report rates by department as the baseline.
Train the ones who clicked
Let micro-lessons fire on failure, assign role-based courses in the LMS, and retest the groups the heatmap flagged.
Report and commit
Show the board risk scores by department against the baseline, then settle scope, term and the INR quote with GST.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“The SMS round caught far more people than the email round did. That one result changed how we planned the year’s training.”
“Plant staff rarely read email, so QR-code posters were the useful test for us. The heatmap showed which shifts needed a session.”
“Micro-lessons right after a click worked better than the annual course. Repeat clickers dropped over two quarters.”
“The CISO dashboard gave our audit committee one risk number per department instead of a stack of spreadsheets.”
“We needed Hindi and Marathi modules for branch staff. Languages were not listed, so we had to confirm them during the pilot.”
“Good simulations, but the quote took a few rounds and we had to ask whether the training LMS was a separate line.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the security awareness training market — tap any vendor to see why it sits where it does.
TechBag Security Awareness Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only; India-built; no named customers or analyst placement.
Simulation Channels × Training Depth
The grid nobody publishes — how many channels a product can test your people on vs how deep the training, scoring and reporting behind it go.
Email, SMS, QR and voice modules; LMS with accreditation.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Aquila I CASA vs the security awareness field
Against KnowBe4 Security Awareness Training, Proofpoint ZenGuide, Mimecast Engage, Arctic Wolf Aurora Security Awareness and Training and TitanHQ SAT — on channels, content, languages, risk scores, price and India data.
| Dimension | Aquila I CASA (Cyber Attack Simulation & Awareness) | KnowBe4 Security Awareness Training | Proofpoint ZenGuide | Mimecast Engage | Arctic Wolf Aurora Security Awareness and Training | TitanHQ SAT |
|---|---|---|---|---|---|---|
| What it is | Simulation plus LMS | Standalone SAT platform | Suite awareness module | Risk-steered training | Managed microlearning | Ex-SafeTitan SAT |
| Who runs the programme | Your admin; workshops too | Your admin, AI help | Your admin, plus rules | Your admin, risk-led | Arctic Wolf, fully | TitanHQ, if you opt in |
| Simulation channels | Email, SMS, QR, voice | Unlimited phishing tests | QR, TOAD, ThreatFlip | Inside the training | Email phishing tests | Gamified, randomised |
| Training content | Six formats, no count | 200+ or 1,000+ modules | Threat-led microlearning | Sitcom-style videos | 3 minutes, fortnightly | 8–10 minute modules |
| Languages | Not documented | 47+ languages | 40+ languages | Not documented | Not published | Not published |
| Training after a failed test | Instant micro-training | Ask how it is set | Adaptive Pathways | Risk picks the lesson | On a fixed rhythm | Continuous campaigns |
| Risk scoring and reports | Person, group, company | Risk scoring (Advanced) | Risk scores, benchmarks | Person + company score | Manager reports | Monthly summaries |
| Report button and users | Not documented | Phish Alert Button | Report Suspicious | APIs, federation | Report Phishing button | Not documented |
| Wider-platform tie-in | Exposure-triggered | Standalone; add-ons | Proofpoint email data | Human risk platform | Beside Aurora MDR | Shield and Complete |
| Pricing model | Quote; meter unstated | Per seat, billed yearly | Per user, quoted | Per user per year | Quote or bundle | Per user, quoted |
| Published entry price | Not published | $2.40/seat/month | Not published | £6.30–18.50 on G-Cloud | Not published | Not published |
| India data region | Not published | US, EU, UK, CA, DE | India data centre | UK on G-Cloud | No India region | None listed |
| Lock-in and exit | Export not documented | Large library to replace | Tied to Proofpoint data | Tied to Engage scores | LMS download (Training+) | Bundle unwinding |
| Best fit | India-first awareness | Library-first programmes | Proofpoint email estates | Mimecast estates | Arctic Wolf MDR estates | MSPs, small clients |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Aquila I CASA (Cyber Attack Simulation & Awareness) if…
- ✓Your staff are targeted by SMS, QR codes and phone calls as much as by email, and you want to test all of them
- ✓You want simulation, role-based training and accreditation from one Indian vendor, with risk scores the board can read
- ✓You value a vendor that has run in-person awareness workshops as well as a platform
Compare alternatives if…
- ✓You want a published per-seat price and the largest library — KnowBe4 lists both
- ✓Training records must be held in India — Proofpoint’s India data centre, opened in 2025, is documented
- ✓You want someone else to run the whole programme — Arctic Wolf and TitanHQ will
Do not expect…
- ✓Mail filtering or real-time blocking of live phishing — CASA trains and measures
- ✓A published price, a language list or a documented hosting region
- ✓Named customer case studies or an analyst placement
Aquila I CASA (Cyber Attack Simulation & Awareness) is one of 36 email security products TechBag carries. The Email Security guide narrows them to a shortlist and shows the reasoning. →
What do staff clicks cost you?
Drag the sliders (employees you train; IT-security hour cost). Estimates model the IT and security time spent handling incidents that start with a staff click — password resets, cleaning devices, chasing fraud — at an assumed 1.5 hours per employee a year, with 70% of it removed by regular simulation and training. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Quote only. Aquila I publishes no price for CASA or for its Cyber Awareness training LMS, and no INR list. It does not say whether licensing is per user, per campaign or per year, whether SMS and voice delivery costs are included, or whether the LMS is a separate line. TechBag maps your user groups and channels first, then gets the quote itemised in INR with GST.
Aquila I CASA
Best for testing staff on email, SMS and QR code
- Quoted per scope; no public list
- Instant micro-training after a click
- Risk scores by employee, group and organisation
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
+ Cyber Awareness LMS
Best for role-based courses with accreditation
- User Behaviour, Train, Assess, Accredit
- Six content formats and a CISO dashboard
- Confirm whether it is a separate line
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Which Indian languages are training modules and simulation templates available in today, not on the roadmap?
Are SMS, QR code and voice simulations included in the base licence, and who pays for SMS and call delivery costs?
Where are staff names, phone numbers and click data stored? India origin is not data residency; get it in writing.
How are users loaded — directory sync, SSO or CSV — and is there a report-phish button for Outlook and Gmail?
Is pricing per user or per campaign, and is the Cyber Awareness LMS in the quote or a separate line? Ask for INR with GST.
Remember that CASA does not block real phishing; which mail filter stays in front, and does it allow-list simulations?
Can courses be exported in SCORM to your own LMS, and in what format do results and history leave if you switch?
Aquila I publishes no named case studies; ask for a reference customer in your sector that runs CASA today.
Questions buyers ask
Ready to evaluate Aquila I CASA?
Map your departments, roles and the channels you want tested, or let a TechBag advisor settle languages and the hosting region with Aquila I and get the quote itemised in INR.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.