Hi,

We need to setup an open source / free LMS system to deliver security awareness trainings within company. Why we are not using commercial solutions? because we dont have budget. On the other hand, we are able to get security awareness trainings from a friendly company ( they created those training for their own use), so we just need to setup an LMS.

Our expectations from the LMS are:

  • support for SCORM packages

  • ability to create different courses and assignments for different departments.

  • free or very low cost (like below 500$ )

  • ability to upload user list via CSV file

  • ability to send unique training link to each end user via email ( most of the commercial solutions assign trainings this way)

  • as easy as possible installation and usage. I know open source solutions will not be very easy to install and manage but if there are options, i would prefer the easiest one of course.

We have technical background, so we can deal with installation and maintenance of open source solutions. In fact we installed Moodle , made basic configuration. But there were few drawbacks;

  1. Course assignment will be done by non technical people and interfaces of Moodle seemed a bit complicated.
  2. We could not find the “assign trainings via unique link in email” feature. I think it is possible with plugin, but did not test it yet.

I think this discussion can be useful for others too… Because prices of security awareness training solutions can be high if you have several thousand users. On the other hand even if you cant find a SCORM compliant training content, you can turn your powerpoint presentation into a SCORM package using ispring easily and use it as a basic training content. It will have watermark, but who cares…

I have been trying to understand and compare alternatives for a while. But there are too many options like Moodle, Canvas, Open edX, Totara, FormaLMS and etc… and understanding their features or if they would meet requirements if very difficult. You need to install and test them one by one. Testing Moodle took some time, so wanted to check community opinions before jumping to next one :).

Please share experience if you have already gone through this process and as i wrote it can be a good discussion for future references…

PS: Please do not suggest commercial solutions or compare TCO of commercial vs open source. We have already considered those facts and we need to go with open source / free solution.

thanks in advance.

Answer from ahmettoprak on community.spiceworks.com
🌐
Dcsa
securityawareness.dcsa.mil › itawareness › index.htm
Insider Threat Awareness
This course provides a thorough ... security program. The course promotes the reporting of concerning behavior observed within the place of duty. Using case study scenarios, the course teaches common indicators associated with insider risk. The instruction promotes a proactive approach to reporting, to support positive outcomes for the workforce. NOTE 1: If you are completing this course as a prerequisite for a CDSE instructor-led course or as part of a specific CDSE training curriculum, ...
🌐
G2
g2.com › categories › security-awareness-training › free
Best 61 Free Security Awareness Training Software Picks in 2026 | G2
Best free Security Awareness Training Software across 61 Security Awareness Training Software products. See reviews of KnowBe4 Security Awareness Training, MetaCompliance Security Awareness Training, SoSafe and compare free or paid products easily. Get the G2 on the right Security Awareness ...
Address   100 S Wacker DrSTE 600, 60606, Chicago
Discussions

Cyber101.com : Free high-quality Cyber Awareness Training
This is so cool. As someone who works in Cybersecurity AND have taken this training. This is cool. You have a potential to make a great business out of this. Humans still remains the weakest link in the network. More on reddit.com
🌐 r/cybersecurity
57
310
December 4, 2023
Open Source / Free LMS for delivering security awareness trainings
Hi, We need to setup an open source / free LMS system to deliver security awareness trainings within company. Why we are not using commercial solutions? because we dont have budget. On the other hand, we are able to get security awareness trainings from a friendly company ( they created those ... More on community.spiceworks.com
🌐 community.spiceworks.com
4
3
November 19, 2024
Security Awareness Training
I've used KnowBe4 in a MSSP capacity for couple years now, I cant fault it. setup is straightforward, 1000s of base templates with the ability to create complex custom templates, tons of training material and even has a "ai" thing that can map out an entire years worth of content with some questions (cant confirm how good this is as I've not used it myself) support is pretty speedy and normally respond within 2/3hrs. If there's anything specific you want to know about knowbe4 let me know and ill do my best to answer. More on reddit.com
🌐 r/cybersecurity
22
0
January 31, 2022
Security Awareness Training
  1. Password strength / tips / policy. (You can watch my talk about this here https://www.youtube.com/watch?v=5i_Im6JntPQ ). Dont put passwords in .txt or .doc documents. Dont email passwords. Dont share the same password on multiple sites. Dont use your work password on the Internet. etc etc

  2. How to NOT get Social Engineered / spamed / virused' (Dont click on that, we will never ask you for your password stuff)

  3. Tell them about filtering web-proxy. And how you can see every site they goto.

  4. Talk to them about their workstations. You will be looking at them - and looking for bad stuff

  5. How they should react if something "happens". i.e. dont call you and say "The INTERNET is down!". Just have them called NANOG directly ;)

More on reddit.com
🌐 r/sysadmin
15
12
June 26, 2010
🌐
Cyber.gov.au
cyber.gov.au › learn-basics
Learn the basics | Cyber.gov.au
Sign up to our free alert service. You’ll receive an alert when we identify a new cyber threat. The alert service will also help you through what to do if a cyber attack happens. ... Be generous and assist your older relatives. If you have a small business, upskill your staff by training and talking about cyber security.
🌐
Wizer-training
wizer-training.com
Free Security Awareness Training & Phishing Simulation | Wizer
At Wizer, we make security awareness training simple, fun, and effective. Our program features quick 1-minute videos and a micro-learning approach that fits into any schedule. Empower your employees with engaging, free training designed to protect your business from cybersecurity threats...
🌐
CanIPhish
caniphish.com › free-security-awareness-training
CanIPhish: Free Security Awareness Training For Employees
Transform your team's cybersecurity with CanIPhish's free security awareness training platform. Use engaging modules, interactive quizzes, and animated videos to make learning fun and impactful!
🌐
Reddit
reddit.com › r/cybersecurity › cyber101.com : free high-quality cyber awareness training
r/cybersecurity on Reddit: Cyber101.com : Free high-quality Cyber Awareness Training
December 4, 2023 -

Hi guys,

We (myself and a childhood friend who owns a video production company) just launched this completely free, high-quality cyber awareness website this week!

https://www.cyber101.com

Covers the following topics :

  • Global threat landscape

  • Phishing

  • Passwords

  • MFA

  • Malware

  • Ransomware

  • Device security

  • Network security

  • Data security and privacy

Its completely free. No ads, no catch, no data mining. We want to make that knowledge accessible to as many people as possible. We're also planning on launching an enhanced version with phishing simulation and user onboarding automation later, and we think having a large amount of users will increase our chances of getting paid clients too.

Please let us know what you think so we can improve our platform!

🌐
HHS.gov
hhs.gov › about › agencies › asa › ocio › cybersecurity › security-awareness-training › index.html
Security Awareness and Training | HHS.gov
October 3, 2024 - The Department of Health and Human Services (HHS) must ensure that 100 percent of Department employees and contractors receive annual Information Security awareness training and role-based training in compliance with OMB A-130, Federal Information Security Management Act (FISMA), and National ...
Find elsewhere
🌐
Amazon
aboutamazon.com › news › community › amazon-releases-free-cybersecurity-awareness-training
Amazon releases free cybersecurity awareness training
October 26, 2021 - Amazon is providing businesses and individuals around the world with free access to the same cybersecurity awareness training the company's employees use.
Top answer
1 of 4
3

Hi,

We need to setup an open source / free LMS system to deliver security awareness trainings within company. Why we are not using commercial solutions? because we dont have budget. On the other hand, we are able to get security awareness trainings from a friendly company ( they created those training for their own use), so we just need to setup an LMS.

Our expectations from the LMS are:

  • support for SCORM packages

  • ability to create different courses and assignments for different departments.

  • free or very low cost (like below 500$ )

  • ability to upload user list via CSV file

  • ability to send unique training link to each end user via email ( most of the commercial solutions assign trainings this way)

  • as easy as possible installation and usage. I know open source solutions will not be very easy to install and manage but if there are options, i would prefer the easiest one of course.

We have technical background, so we can deal with installation and maintenance of open source solutions. In fact we installed Moodle , made basic configuration. But there were few drawbacks;

  1. Course assignment will be done by non technical people and interfaces of Moodle seemed a bit complicated.
  2. We could not find the “assign trainings via unique link in email” feature. I think it is possible with plugin, but did not test it yet.

I think this discussion can be useful for others too… Because prices of security awareness training solutions can be high if you have several thousand users. On the other hand even if you cant find a SCORM compliant training content, you can turn your powerpoint presentation into a SCORM package using ispring easily and use it as a basic training content. It will have watermark, but who cares…

I have been trying to understand and compare alternatives for a while. But there are too many options like Moodle, Canvas, Open edX, Totara, FormaLMS and etc… and understanding their features or if they would meet requirements if very difficult. You need to install and test them one by one. Testing Moodle took some time, so wanted to check community opinions before jumping to next one :).

Please share experience if you have already gone through this process and as i wrote it can be a good discussion for future references…

PS: Please do not suggest commercial solutions or compare TCO of commercial vs open source. We have already considered those facts and we need to go with open source / free solution.

thanks in advance.

2 of 4
1

My first thought is Oodoo, it is an everything box, including learning. You can run a community version or host it for low cost on their servers.

Next up would be The Best Learning Management System - Moodle Online LMS it seems to be the standards from what all others are met by in reviews online.

🌐
Hook Security
hooksecurity.co › studios
Free Security Awareness Training Videos by Hook Studios
Discover our hub of Free Security Awareness Training Videos, designed to enhance cybersecurity knowledge in your organization. These engaging and informative videos cover vital topics like phishing, password security, and data protection, making them an ideal resource for employees at all levels.
🌐
Alison
alison.com › course › digital-security-awareness
Free Online Cyber Security Awareness Course | Alison
Learn about types of security threats, social engineering, identity theft, and data classification in this free online cyber security awareness course.
Rating: 4 ​ - ​ 186 votes
🌐
Infosec
infosecinstitute.com › security awareness & phishing training | infosec iq
Security Awareness & Phishing Training | Infosec IQ
Add skill and certification training for security, IT and development teams ... Are you a reseller or managed service provider? Get partner pricing. See Infosec IQ in action and experience our award-winning training first-hand with a free demonstration.
🌐
ISC2
isc2.org › training › online-self-paced › cc-online-self-paced
CC Self-Paced Training, A Custom Learning Experience
Who Can Enroll? This training is for students, prospective employees, entry-level professionals, and career-changers wishing to start their path toward cybersecurity leadership. There are no prerequisites. ... Summarize the foundational concepts of information security principles.
🌐
Qualys
qualys.com › training
Qualys Certification and Training Center | Qualys
Take free self-paced or instructor-led certified training on core Qualys topics, and get certified.
🌐
KnowBe4
knowbe4.com › security-awareness-training
Security Awareness Training | KnowBe4
Like any cyber risk mitigation strategy, security awareness training works best when procedures are written down to ensure your team walks through the necessary steps as efficiently as possible. Download this free guide to learn why a dedicated security awareness training policy is important ...
🌐
CISA
cisa.gov › cybersecurity-training-exercises
Cybersecurity Training & Exercises | CISA
CISA Learning is a free, online, and on-demand cybersecurity and infrastructure security training system. With courses ranging from beginner to advanced levels, you can strengthen or build your knowledge and skillsets at your own pace and schedule! ... CISA’s no-cost Incident Response Training ...
🌐
Keepnet Labs
keepnetlabs.com › home › blog › cyber security awareness training for employees: 12 free courses & ppts (2025)
Employee Security Awareness: 12 Free Courses & PPTs (2025) - Keepnet
Get 12 free cyber security awareness training courses and PPT slides for your employees. Easily import into your LMS, boost compliance, and reduce human cyber risks in 2025.
Published   4 days ago
🌐
CDSE
cdse.edu › Training › eLearning
eLearning Courses
The Counterintelligence (CI) Awareness Program's purpose is to make DOD and Industry Security personnel aware of their responsibility to report unusual activities or behaviors and various threats from foreign intelligence entities, other illicit collectors of US defense information, and/or ...
🌐
EC-Council
eccouncil.org › ec-council › cybersecurity courses, training and certification › free online cyber security certifications courses
Free Online Cyber Security Courses with Certificates in 2026
5 days ago - EC-Council offers a free cybersecurity course online for beginners with certification. Join us and safeguard your digital world with free cybersecurity training
🌐
NIST
nist.gov › itl › applied-cybersecurity › nice › resources › online-learning-content
Free and Low Cost Online Cybersecurity Learning Content | NIST
April 17, 2025 - The following links are for free and low-cost online educational content on topics such as information technology and cybersecurity. Some, not all, may contribute towards professional learning objectives or lead to industry certifications and online degrees. Please note that this site will continue to be updated as new information is gathered and edited for clarity and accuracy. Career and Professional Development · Employee Awareness Training ·