Syntak Learning · Features
Everything Syntak Learning does.
Syntak Learning delivers security training, collects policy acknowledgments, and keeps the records an auditor will ask for. Here is everything it does today.
- default pass mark
- 80%
- default reminder points: 30, 14, 7, and 1 days before, and the due date
- 5
- CISSP-style domain courses
- 8
- tabletop exercise scenarios
- 9
- SOC 2 and ISO 27001 control codes for evidence
- 32
Course catalog and content
Ready-made security courses, and the tools to build or adapt your own.
-
Built-in courses
Start with Security Awareness Essentials, OWASP Top 10, AI Security, Developer Security, and a three-course leadership track.
-
CISSP-style domain courses
Assign eight domain courses covering the CISSP domains. They are assigned only, not shown in the open catalog.
-
Interactive lessons
Learn through stories, decisions, code reviews, and checkpoints, with plain-language hints.
-
Course builder
Build your own courses with draft and published versions and a preview.
-
Open or assigned-only
Choose whether each course appears in the catalog or only for people you assign.
-
Courses per organization
Control which courses and packs each organization can use, including courses owned by the platform.
Programs and assignments
Bundle courses and policies for a role, and assign them with due dates.
-
Three role-based programs
Use the Developer, Company, and Leader programs, each bundling courses with the policies to acknowledge.
-
Your own programs
Build custom programs from the courses and policies you choose.
-
Assign to anyone
Assign to the whole organization, a team, or one person.
-
Annual recurrence
Repeat assignments every year, with the next cycle opening 90 days before the due date by default.
-
Clear statuses
Track assignments as pending, in progress, complete, overdue, or excused.
-
Bulk removal
Remove many assignments at once.
Learner experience
Training people will finish, with progress they can see.
-
Learner dashboard
See a skills map, experience points, streaks, and what is due.
-
Hands-on labs
Practice in a course player with code-fix labs and pull-request review labs.
-
Badges and leaderboards
Earn badges, and view leaderboards by team or by individual, depending on your organization's setting.
-
Opt out of public rank
Learners can choose not to appear in public rankings.
-
Built-in help
Read help articles written for learners and for admins.
Quizzes and scoring
Knowledge checks that mean something.
-
Multiple-choice questions
Answer order is shuffled, and an explanation follows each answer.
-
Pass mark per course
Set a pass score for each course. The default is 80 percent.
-
Retake rule
One immediate retry, then a hold before the next attempt.
-
Recorded as evidence
Every pass and fail is saved to the evidence log.
-
Rushing costs points
Experience points are reduced for rushed answers.
Policy acknowledgment
Prove that a specific person read a specific version of a policy.
-
Policy vault
Upload a PDF, checked and limited to 10 MB, or link to a policy in another system.
-
Versioned policies
Each version is stored with a SHA-256 hash.
-
A record that stands up
Every acknowledgment stores the statement shown, the time, the browser, and the source system.
-
Part of a program
Assign acknowledgments inside a program, and an acknowledgment closes the matching open assignments.
-
New version, new acknowledgment
When a policy changes, reminders resume until people acknowledge the new version.
-
Links to your GRC records
Link a policy to its record in a GRC system by identifier.
Reminders
Email nudges until the work is done.
-
Default reminder schedule
Reminders go out 30, 14, 7, and 1 days before the due date, on the due date, and while the item is overdue.
-
Set it per assignment
Change the reminder days for any assignment.
-
Sent on a schedule
An hourly sweep sends reminders, or you can trigger them from a secured scheduled endpoint.
-
Sent once, and logged
Each reminder goes out once per day offset, and every send or failure is logged.
-
Subject lines that match urgency
Emails are marked as a reminder, due today, or overdue.
Reporting and proof
Records an auditor can use without a meeting.
-
Certificates
Issue a certificate with a serial number and a frozen snapshot of the course version. Renewals archive the earlier one, and you can print or save as PDF.
-
Append-only evidence log
Every event is recorded and tagged with control codes.
-
Controls mapped to training
Map courses and policies to 17 SOC 2 and 15 ISO 27001 control codes.
-
CSV export with a content hash
Export evidence filtered by control. The export itself is logged.
-
Admin dashboard
See open, overdue, and at-risk counts, per-person rollups, and live retakes.
Administration and security
People, teams, roles, and the safeguards around the app itself.
-
Admin, manager, and learner roles
Give people the access that fits their job.
-
Users and teams
Organize people into teams with managers, and deactivate people who leave.
-
Invite links
Invite people with links that stay valid for 14 days.
-
Authenticator-app MFA
Sign-in requires a code from an authenticator app, and an admin password reset forces a change at next sign-in.
-
Multiple organizations
A platform admin role manages many organizations, with a break-glass mode for entering one.
-
Tabletop exercises
Run live incident response and business continuity exercises with a facilitator, votes, gap findings, and corrective actions, across nine scenarios.
Syntak Learning
Start with Syntak Learning.
Deliver security training and prove policy acknowledgment across the organization.