Finding
Over 70% forgotten after 48 h
What this means
Ebbinghaus' forgetting curve is relentless: after two days research shows more than 70% of training content is no longer accessible. Only what creates an emotional impression stays in the mind.
Live Hacking Show
See how attackers really operate.
Your employees watch live as passwords fall, networks are compromised and identities are faked. More awareness in 60 minutes than in a year of e-learning.
ISO 27001 Known from ZDF & WDR 500+ Shows
Bekannt aus
Trusted by over 200 organisations
- Live Hacking Shows delivered
- 500+
- Clients across all industries
- 200+
- Years of stage experience
- 10+
- Experienced speakers in the team
- 4
The Problem
Why traditional security training is not enough
Compliance training and e-learning cost time - but bring no lasting behavioural change. The numbers speak for themselves.
No.FindingWhat this means
Finding
33% click on phishing
What this means
Despite annual mandatory training, one third of employees click on simulated phishing emails. Knowledge alone does not change behaviour - experience does.
Finding
USD 5.31 M per incident
What this means
The average cost of a data breach (IBM Cost of a Data Breach Report 2024). One hour of live hacking is the most cost-effective insurance available.
The Solution
Experience rather than learn - awareness that lasts
In a Live Hacking Show our experts demonstrate current attack techniques in real time - comprehensibly for any audience. Participants see with their own eyes how quickly a password falls, a network is compromised or an identity is forged.
No.AdvantageDetail
Emotional impact
When your own password falls in 3 seconds, everyone immediately understands why a password manager is indispensable. This experience lasts - permanently.
Vendor-independent
No product advertising, no sales presentation - pure knowledge transfer and awareness raising. We are independent and neutral.
Always current
Our attack scenarios are continuously updated to reflect the current threat landscape - including AI-based deepfake attacks and voice cloning.
For every audience
From senior management to working students - we adapt language and technical depth to your audience. No prior knowledge required.
Attack Scenarios
Choose your topics - we deliver the show
From over 10 attack scenarios we compile your individual programme. Here is a selection of our most impactful demonstrations:
Phishing & Social Engineering
Live demonstration of realistic phishing attacks - from the forged email to credential disclosure in seconds.
Spear-Phishing · Credential Harvesting
Wi-Fi Hacking
We show how attackers compromise open and supposedly secured networks - in the office, hotel or home office.
Evil Twin · MITM
Password Cracking
Live demonstration of how quickly supposedly secure passwords are cracked - and why password managers are indispensable.
Hashcat · Rainbow Tables
Ransomware & Malware
From clicking the attachment to encrypting all data - the complete sequence of a ransomware attack in real time.
Malware Demo · Ransomware
USB & Physical Attacks
How one USB drive suffices to take full control of a computer - within three seconds.
Rubber Ducky · BadUSB
Deepfakes & AI Attacks
Cloned voices, manipulated video conferences - we demonstrate how AI-powered attacks work today.
Voice Cloning · Deepfake Video
Comparison
Live Hacking vs. E-Learning vs. Phishing Simulation
Three awareness measures - each has its place. The strongest impact? The combination.
| E-Learning | Phishing Simulation | Live Hacking | |
|---|---|---|---|
| Impact | Short-term | Measurable | Emotionally lasting |
| Engagement | Mandatory tick-box | Unconscious | Enthusiasm |
| Audience | Individual | Whole organisation | All - incl. management |
| Internal effort | High (rollout) | Medium (setup) | Minimal (room + projector) |
| Behaviour change | Low | Targeted | Deep and lasting |
| Best used as | Baseline compliance | Measurement tool | Kick-off & highlight |
Maximum impact? Live Hacking + Phishing Simulation as a before-and-after comparison.
Format Selection
Three formats - right for every occasion
Whether a 30-minute keynote or a full-day programme - we adapt the show to your setting.
No.FormatDurationDescription & Features
Format
Keynote
Duration
30 - 60 min.
Description & Features
3-5 attack scenarios with explanations and concrete protective measures. Fits into any all-staff meeting or kick-off.
- For all employees
- Handout included
- On-site, online or hybrid
Format
Extended Show
Most bookedDuration
60+ min.
Description & Features
Extended session with 6+ scenarios, interactive elements and an in-depth Q&A round. Maximum impact.
- Maximum awareness effect
- Hands-on elements possible
- On-site recommended
Format
Tailored
Duration
Individual
Description & Features
Split shows, multiple speakers, workshop combinations or multi-day programmes. We develop your format.
- Two or more speakers
- Multi-part or full-day
- Combination with workshops
Quote in 24 hours. Free and non-binding. Request now
Our Speakers
Our speakers come from practice - with hundreds of live hacking shows, penetration tests and consulting projects.
Managing Director of AWARE7 GmbH with many years of expertise in information security, penetration testing and IT risk management. Graduate of the Internet Security master's program at Westfälische Hochschule (if(is), Prof. Norbert Pohlmann). Bestselling author with Wiley-VCH and lecturer at the ASW-Akademie. His assessments of cybersecurity and digital sovereignty have appeared in Welt am Sonntag, WDR, Deutschlandfunk and Handelsblatt, among others.
IT-Grundschutz-Praktiker (TÜV) IT Risk Manager (DGI) § 8a BSIG Prüfverfahrenskompetenz Ausbilderprüfung (IHK) T.I.S.P. Board-Mitglied
M.Sc. in Internet Security (if(is), Westfälische Hochschule). COO and authorized officer (Prokurist) with expertise in information security consulting and security awareness. Junior professor (Nachwuchsprofessur) for Cyber Security at FOM Hochschule, CISO lecturer at isits AG and doctoral candidate at the Graduierteninstitut NRW.
ISO 27001 Lead Auditor (PECB/TÜV) T.I.S.P. (TeleTrusT) ITIL 4 (PeopleCert) BSI IT-Grundschutz-Praktiker (DGI) Ext. ISB (TÜV) BSI CyberRisikoCheck CEH (EC-Council)
Additional Speakers
Subject to availability and topic
Benjamin Krüger
Security Consultant
Jonas Poenicke
Security Consultant
Konstantin Schauerte
Security Consultant
Dennis Westkamp
Security Consultant
Live Hacking in Action
See what a show looks like
60 seconds that show why our clients talk about the show months later.
How it works
From enquiry to show in 4 steps
StepStageWhat happens
Stage
Briefing Call
What happens
We discuss target audience, setting and desired focus areas - free of charge and non-binding.
Stage
Concept & Agenda
What happens
You receive a tailored agenda with the attack scenarios most relevant to your organisation.
Stage
Live Hacking Show
What happens
Our experts demonstrate live how attackers operate - clearly, impressively and engagingly.
Stage
Handout & Follow-up
What happens
All participants receive a handout with concrete protective measures. Optional: phishing simulation as an effectiveness test.
References
Successful Live Hacking Shows
These case studies are available in German.
Audiences
Who is the show right for?
Management
Compact management pitch that makes cyber risks tangible and justifies investment in IT security.
All Employees
All-staff meetings, training days or kick-offs - the show works for any company size.
Customers & Partners
Trade fairs, customer events or partner conferences - position yourself as a security-conscious organisation.
IT Department
Technically deeper variant with current exploits, lateral movement and infrastructure attacks.
IT Security Vendors
Show your customers live why your solution matters. Our show is always vendor- and provider-neutral.
Other audience?
We adapt language and depth to any audience.
Discuss requirementsPreparation
What you provide - we bring the rest
Preparation is straightforward. In most cases existing rooms and standard technology are perfectly sufficient.
You provide
01
Projector or screen
HDMI connection sufficient
02
Internet access
Stable Wi-Fi or LAN
03
Room with seating
Conference room, auditorium or canteen
04
Time slot from 30 min.
Embedded in your programme
For remote shows room planning is not needed - you only need a video conferencing tool. Free technical check beforehand on request.
Request show ISO/IEC 27001 certified
BSI-qualified
AZAV-certified training provider
T.I.S.P.-certified speakers
What's next
After the show: making awareness stick
A Live Hacking Show is the kick-off. For lasting behavioural change we recommend complementary measures:
Managed Phishing Simulation
Measure the show's impact - with realistic phishing campaigns as a before-and-after comparison.
DetailsPenetration Testing
Check the technical side - our pentesters find weaknesses in your systems.
DetailsEscape Desk
Reinforce information security through play - as a team event after the live hacking show.
DetailsWhy AWARE7 for Security Awareness
What sets us apart from other providers
Pure awareness platforms don't test systems. Pure consulting firms are too far removed. AWARE7 combines both: we hack your infrastructure <em>and</em> train your employees: tailored to mid-sized companies, personal, without enterprise overhead.
Research and teaching as our foundation
20 %Around 20% of our revenue comes from research projects for the BSI and the BMBF. Our studies, published at ACM and Springer conferences, analyse millions of websites and tens of thousands of phishing emails. Three of our executives are professors at German universities at the same time.
Digital sovereignty: no compromises
100 %From first contact to final report, your data is stored on our own servers in Germany - no US cloud providers, no third-country transfers. Our AI also runs on our own hardware in Germany - with locally operated open-source models. Client and project data never reach external AI services. All staff are permanently employed, covered by social insurance and bound by uniform legal obligations.
More on digital sovereigntyFixed price within 24h: predictable project timelines
24 hWithin 24 hours you receive a binding fixed-price quote without hourly rate risk. A well-practised team and standardised processes ensure a clear schedule with a defined start and end date.
Your dedicated contact
1:1A personal project manager accompanies you from the first meeting to the retest. You book appointments directly with your contact person and keep the same contact throughout the project.
Peer-reviewed publications
Different Seas, Different Phishes - Large-Scale Analysis of Phishing Simulations
ACM AsiaCCS 2025
Oskar Braun, Jan Hörnemann, Norbert Pohlmann, Matteo Große-Kampmann
A Platform for Physiological and Behavioral Security
NSPW 2025
Jan Hörnemann
Privacy from 5 PM to 6 AM: Tracking and Transparency in the HbbTV Ecosystem
IEEE/IFIP DSN 2025
Jan Hörnemann, Norbert Pohlmann, Matteo Große-Kampmann
Understanding Regional Filter Lists: Efficacy and Impact
PoPETS 2025
Jan Hörnemann, Norbert Pohlmann, Matteo Große-Kampmann
Who is AWARE7 the right partner for?
Mid-sized companies with 50-2,000 employees
Companies that need real security, without paying for a DAX-corporation provider. Fixed price, clear scope, one point of contact.
IT managers & CISOs
Who have to argue convincingly in-house and need a report in boardroom language for that, not just technical findings.
Regulated industries
Critical infrastructure, healthcare, financial services: NIS-2, ISO 27001, DORA. We know the requirements and deliver evidence that auditors accept.
Frequently Asked Questions
Your questions about the Live Hacking Show
How long does a Live Hacking Show last?
Depending on the format, between 30 and 90 minutes. A 30-minute version is suitable as a management pitch or event opener. The 60-minute variant is our standard. We recommend 90 minutes for interactive sessions with Q&A and hands-on elements.
How many participants can attend the show?
From 20 people in a workshop format to several hundred attendees at company events or trade fairs - the show scales. We regularly present to groups of 10 to 500 people.
Is the show available on-site or online?
Both are possible. On-site events have the strongest impact as participants experience the attacks in the room directly. Online shows are conducted via video conference - with screen sharing and interactive elements.
What prior knowledge do participants need?
None. The show is designed to be understandable for everyone - from senior management to administration to the IT department. We adjust the technical depth to the target audience.
Is the show GDPR-compliant?
Yes. We do not collect any personal data from participants. All demonstrations take place in controlled environments - no real systems or employee data are attacked.
Which topics can we choose?
From over 10 attack scenarios we compile your individual programme. Focus areas are freely selectable - from phishing and social engineering to Wi-Fi hacking to AI-powered deepfake attacks.
What does a Live Hacking Show cost?
Costs depend on format, duration and location. We provide a customised quote within 24 hours. Simply get in touch - the initial consultation is free and non-binding.
Can the show be embedded in other events?
Yes. Most of our shows take place as part of all-staff meetings, kick-offs, training days, trade fairs or customer events. We adapt to your programme.
In which languages is the show available?
Standard languages are German and English. Additional languages are available on request.
Aus dem Blog
Weiterführende Artikel
Security Awareness
Phishing erkennen: Checkliste für Mitarbeiter (2026)
Phishing erkennen: Checkliste mit Erkennungsmerkmalen für E-Mail-Phishing, Smishing und Vishing - mit Sofortmaßnahmen nach dem Klick.
Oskar Braun Weiterlesen
Security Awareness
Security Awareness messen: Klickraten, Wissenstests und Metriken
Security Awareness messen: Phishing-Klickraten richtig interpretieren, Verhaltensmetriken, Wissenstests und ROI-Argumente für den Vorstand.
Oskar Braun Weiterlesen
Security Awareness
Was kostet ein Live Hacking? Preise und Pakete im Überblick
Ein Live Hacking ist eine gute Möglichkeit, Mitarbeiter zu sensibilisieren - doch was kostet ein Live Hacking?
Chris Wojzechowski Weiterlesen
Ready for a show your organisation will talk about for months?
Tell us briefly about your event - audience, preferred date, focus areas. We get back within a few hours with date options and a first estimate. Free and non-binding.
Free · 30 minutes · No obligation
