Products

Offset Aware

Security awareness training for your staff, on your own server. 46 courses in four packs - ISO 27001, HIPAA, and SAMA for banks or finance companies - with a quiz after each one, certificate upload, staff import from a spreadsheet, reminder emails, and a record of who has done what for your ISO 27001 auditor.

v1.3.0 Windows Docker Free to use

It runs on one machine, inside your network. No cloud account, and no employee data leaves the building.

Offset Aware: Employee directory

Community Edition · v1.3.0

Download Offset Aware

  1. 1
    Pull the image
    docker pull ghcr.io/offsetsecurity/offset-aware
  2. 2
    Download the setup files

    compose.yaml and env.example are in its deploy/docker folder

    Download the portal.zip
Windows or Linux · needs Docker with the Compose pluginNew to Docker? Step-by-step guide

Key features

  • 46 courses in four packs: ISO 27001, HIPAA, SAMA for banks and SAMA for finance companies, with a quiz after each one
  • Staff import from a spreadsheet, and invitations by email
  • Certificate upload and reminder emails
  • A record of who has done what, for your ISO 27001 auditor
  • A status matrix: every person against every course, at a glance
  • Each member of staff sees what they have done and what is left
  • Who is behind and what they are missing, with a button to remind them
  • A certificate to download for everyone who finishes

Product details

ForISO 27001 security awareness training
Versionv1.3.0
LicenseFree to use
Runs onWindows & Docker, on your own server
Supportinfo@offsetsecurity.net

What you need

A server64-bit Windows. Docker also runs on Linux
A portOne. 3000 unless you choose another
A certificateNot needed. It makes its own, so it always serves HTTPS
InternetDuring installation only, to download the training videos you tick

Install Offset Aware

  1. Download OffsetAware-1.3.0-setup.exe and run it. It is not code-signed yet, so Windows says "Windows protected your PC": choose More info, then Run anyway
  2. Accept the licence and choose a port. It fills in one nothing else is using
  3. Training modules. Tick the course packs you want: ISO 27001, HIPAA, SAMA for banks, or SAMA for finance companies. Each shows its size, and the installer downloads only the ones you tick
  4. Click Install. The videos download, then Offset Aware installs as a Windows service, so it starts with the machine
  5. The first person to open it creates the administrator account

The shortcut on your desktop opens it. Your staff open the same address from their own computers.

Your data is kept in:

C:\ProgramData\Offset Security\ISO Training Portal

The folder kept the product's old name, so upgrades find it. Back it up and you have backed up every training record.

To remove it: Settings, then Apps, then Offset Aware, then Uninstall. Your training records are left behind on purpose.

Docker runs the portal without installing Node.js or anything else on the machine, and it works the same on Windows and Linux.

If you have never used Docker, follow the step-by-step guide instead: Offset Aware on Docker. It starts with installing Docker itself and says what you should see after every command.

The short version, for somebody who knows Docker already:

  1. Take compose.yaml and env.example from deploy/docker in the download
  2. cp env.example .env, then fill in the one secret it asks for
  3. Set PORTAL_URL to the address your staff will use, and PORTAL_PORT
  4. docker compose up -d

That pulls two images, the portal and its updater, and starts it.

ghcr.io/offsetsecurity/offset-aware ghcr.io/offsetsecurity/offset-aware-updater

Your data lives in a Docker volume, so it survives stopping and restarting. docker compose down keeps it; down -v deletes it, with no undo.

First steps, updates and help

After installing

Open the address in a browser. It serves HTTPS with a certificate it made for itself, so the browser warns you once: choose Advanced, then Proceed. That warning is expected on an on-premise install and does not mean anything is wrong.

Sign in as the administrator you created, then:

  1. Settings, SMTP: point it at your mail server, so it can send reminders and password resets
  2. Employees: import your staff from a spreadsheet, or add them by hand
  3. Send the invitations

Staff sign in, work through the courses, take the quiz after each one, and upload any certificates they already hold. You see who has finished and who has not.

Updating it

On Docker, an administrator installs updates from inside the portal: Settings shows the version, checks for a newer one, and installs it with a button. The old version goes back if the new one does not start.

On Windows, download the new zip and run update.bat as administrator. It keeps your database and your settings.

Getting help

  • In the portal

    Select Help at the top of the portal.

  • In the download

    DEPLOYMENT.md and INSTALLATION.txt cover certificates, mail, backups, and what to do when something goes wrong.

Other products

All products

Getting ready for an audit?

Our practitioners can help you set it up, bring your staff in and show your auditor who has completed what.

Talk to an Expert

Prefer email? Write to info@offsetsecurity.net with your requirements.