Sentinel by NodePoint — cybersecurity awareness training for employees
In short: Sentinel by NodePoint is a cybersecurity awareness training platform that sends employees short quizzes by email — on phishing, phone scams, GDPR and deepfakes — with no employee accounts and with an annual PDF training record for the Bulgarian Cybersecurity Act (NIS2). One quiz takes about 2 minutes. Sentinel is built by NodePoint (NodePoint EOOD), Burgas, Bulgaria; the training content is in Bulgarian and the data is hosted in Bulgaria.
Why do attacks get in through people?
Most successful attacks start with a person who did something reasonable at the wrong moment — clicked a link from a familiar sender, paid an invoice that looked like the previous ones, or read out a code over the phone. According to Verizon's 2026 Data Breach Investigations Report, the human element is present in 62% of breaches, up from 60% a year earlier. Source: Verizon 2026 DBIR, Executive Summary (external website, opens in a new window)
Security software protects the machines. People are protected by habit: recognising a scam before reacting to it. The habit comes from short, regular practice, not from one training session a year.
How Sentinel works — 3 steps
Add your employees' email addresses and choose a schedule — for example every Tuesday at 9:00, different for each group.
Employees receive a short quiz by email
They open their personal link — no login and no password — and answer in about 2 minutes. After each answer they see an explanation of why it is right or wrong.
Management sees the results
participation, the overall score and the level of each employee — and downloads an annual PDF record. Questions answered wrongly come back in later quizzes until they are learned.
No installation, on phone and computer. The manager sets up the system once; after that it runs on its own.
A sample Sentinel question
Topic: Phone scams
A caller says they are "from your bank": "There is a suspicious transaction. To stop it, read me the code you have just received by text message." What do you do? ---
- a) I read out the code — the bank is calling to protect me.
- b) I hang up and call the bank myself on the number on the back of my card.
- c) I ask them to call me back from the official number and then I give them the code.
Show the answer
Correct answer: b) I hang up and call the bank myself on the number on the back of my card.
Why: A bank never asks for SMS codes over the phone — the code authorises a transfer. The only safe response is to hang up and call the official number yourself. Even a call "from the official number" can be spoofed.
Try a real quiz (in Bulgarian) (opens another NodePoint website, opens in a new window)
Training topics
Phishing
Recognising fake emails and text messages — from "the courier", "the bank" or "the boss" — before the click.
Phone scams
Vishing, fake banks and tax authority calls, "your grandson is in hospital", spoofed caller IDs.
GDPR and personal data
What personal data is, when sending to the wrong address is an incident, how to react to a leak.
Deepfakes and AI scams
A cloned voice of the managing director, video deepfakes in online meetings, flawless AI phishing — and the protocol for verifying through a second channel.
In total, 18 topics and more than 3,400 questions (according to sentinel.nodepoint.bg as of 5 November 2026), including digital hygiene, incident response, cloud security, social engineering, physical security, media literacy and family online safety. → All topics (in Bulgarian) (opens another NodePoint website, opens in a new window)
How the content is written: AI suggests new questions, but a human publishes them — an editor approves every question before it reaches employees. This is a core principle of the product.
What does management see?
Management sees the participation and results of each employee: overall score as a percentage, level and when the last quiz was taken. It also sees a ranking by group and which topics are weakest for the organisation as a whole — to decide what to train next.
Employees do not see rankings or other people's results. Protection against "training by punishment" is built into the product: a mistake leads to an explanation and a repeat of the question, not to a sanction.
The dashboard shows, for a selected period: participation by employee and group · overall score in % · level · last quiz · weakest topics · ranking by group.
Sentinel and the Bulgarian Cybersecurity Act (NIS2): an annual training record
The Bulgarian Cybersecurity Act requires members of the management bodies of essential and important entities to complete cybersecurity training every two years and to offer and organise training for their employees (Art. 21(2) and (3), as amended by State Gazette No. 17 of 2026). Training is also one of the risk management measures (Art. 22(2), item 7). The Act does not prescribe a specific platform or format.
Sentinel covers the practical part: the training is regular, short and documented. From the dashboard, the manager downloads an annual PDF record for NIS2. It lists the topics trained and the number of questions and, for each employee, the number of quizzes sent and completed and the average score. The record also shows whether management took part in the training.
Whether training with Sentinel is sufficient for management under Art. 21(2) in a specific case is for the supervisory authority to decide — which is why we advise management to take part in the quizzes too, so that it shows in the record.
What else the law requires — NIS2 guide
Check whether NIS2 applies to your company and how ready you are
Help with the other measures — Cybersecurity and NIS2
Need evidence of training before the next inspection? Request a demo (opens another NodePoint website, opens in a new window)
What data does Sentinel collect and where is it stored?
Sentinel collects the minimum needed for training:
- for employees — name and email; optionally gender and age, only to tailor the questions;
- answer history — for progress, results and repetition of mistakes;
- IP address — only to protect against mass automated sign-ups, not for profiling;
- for managers — name, email, phone.
The data is hosted on NodePoint's own server in Bulgaria. Employees have no accounts; quiz links are personal, temporary and cannot be guessed. Access to the manager and administrator dashboards requires two-factor authentication, and actions involving sensitive data are recorded in an audit log. The data is not sold and is not shared for marketing. Anyone can request an export or deletion of their data.
Sentinel privacy policy (in Bulgarian) (opens another NodePoint website, opens in a new window)
Pricing: for organisations and for personal use
Prices valid until 31 December 2026. Prices for organisations are per employee per month, excluding VAT, billed annually.
| Item | Basic | Full — recommended | Personal plan |
|---|---|---|---|
| Who it is for | Organisations starting with the essentials | Organisations that want to protect their people fully | Individuals and families |
| Price | EUR 1 per employee per month | EUR 1.75 per employee per month | EUR 24 per year (EUR 2 a month) |
| VAT | Excludes VAT | Excludes VAT | Includes VAT |
| Topics | The core "Cybersecurity" question bank (295 questions) | All 18+ topics and 3,400+ questions — phishing, phone scams, GDPR, deepfakes, legal liability, family and children's topics | All topics, including children's online safety |
| Future topics | — | Included automatically at no extra cost | Included |
| Dashboard and record | Schedules, groups, results dashboard, annual PDF record for NIS2 | Everything in Basic | Annual certificate |
| Payment | Annually, by invoice (minimum 5 employees) | Annually, by invoice (minimum 5 employees) | Annually, by card |
| Trial | 14-day demo | 14-day demo | 14-day right of withdrawal with a refund |
| Request a demo (opens another NodePoint website, opens in a new window) | Request a demo of Full (opens another NodePoint website, opens in a new window) | Subscribe (opens another NodePoint website, opens in a new window) |
Why we recommend Full: the scams that reach employees are rarely just "classic" phishing. Phone scams, fake voices and videos (deepfakes), GDPR mistakes with personal data and risks to the family at home are covered in Full but not in Basic. The difference is EUR 0.75 per employee per month, and all future topics are added at no extra cost.
Schools and educational institutions — special terms, please contact us.
Frequently asked questions about Sentinel
Do employees need to create an account or install anything?
No, employees in Sentinel by NodePoint have no accounts, passwords or apps. They receive the quiz by email with a personal, temporary link and answer in the browser on their phone or computer. The only thing they do is open the email and answer.
How much time does training take per employee?
One Sentinel quiz takes about 2 minutes. Management chooses the schedule — for example once a week — and the number of questions per quiz, separately for each group. Short, frequent practice works better than one long training session a year.
Does management see each employee's results?
Yes. Management sees the participation and results of each employee — overall score as a percentage, level and last quiz — as well as a ranking by group and the weakest topics. Employees do not see rankings or their colleagues' results.
Does Sentinel cover the requirements of the Bulgarian Cybersecurity Act (NIS2)?
Sentinel covers regular staff training and provides an annual PDF record — topics, number of quizzes sent and completed and the average score for each employee, and whether management was also trained. The Act requires management training every two years and organising training for employees (Art. 21(2) and (3)), but does not prescribe a specific platform. Sentinel does not cover the other measures under the Act — risk analysis, backups, incidents.
What happens if an employee answers wrongly?
The employee sees an explanation of why the answer is wrong and which one is right, and the same question comes back in a later quiz until it is answered correctly. A mistake in training does not lead to punishment — it is the moment when people learn the most.
How do I prove to an auditor that employees have been trained?
With the annual PDF record for NIS2 that the manager downloads from the dashboard. It lists the topics trained and the number of questions and, for each employee, the number of quizzes sent and completed and the average score; it also shows whether management was trained. The record is generated from the data in Sentinel at the time of download, so it is a good idea to download and archive it every year.
Where is the data stored?
Sentinel's data is hosted on NodePoint's own server in Bulgaria. It is not sold or shared for marketing, and manager access requires two-factor authentication.
Is Sentinel available in English?
Sentinel's training content is written in Bulgarian and built around the scams that target people in Bulgaria — fake courier text messages, calls "from the tax authority", online marketplace schemes. If your organisation needs English-language content, ask us when you request a demo.
How much does cybersecurity training for 20 employees cost?
For 20 employees the Full plan costs EUR 420 a year (20 × EUR 1.75 × 12 months) and Basic costs EUR 240 a year, excluding VAT. The prices are EUR 1.75 and EUR 1 per employee per month, with a minimum of 5 employees, and the demo lasts 14 days.
Can I use Sentinel for myself and my family?
Yes, with the personal plan at EUR 24 a year (VAT included): a weekly quiz from all topics, including children's online safety, with no ads and no account. You have a 14-day right of withdrawal with a refund, and the subscription renews after 12 months with a reminder 14 days in advance.
Start with 2 minutes
Try the quiz your employees will receive — no registration needed. Then request a 14-day demo for your organisation.