We promised some fun for Human Defense Month 2026, so here are two more additions to our Community Kit. Two small security awareness games. Both available in English and German. Both can be played directly online. And both can also be downloaded as editable SCORM packages for your own LMS. In other words: play them, use them internally, adapt them — whatever works for you.
Game 1: Spot the Unsafe Practices
Spot the Unsafe Practices / Erkenne unsicheres Verhalten is about looking more closely at an everyday working environment. Something is wrong. Actually, several things are wrong. The job is simple: find them. I have to confess, it was harder to play than I thought.
The idea behind the game is equally simple. Cybersecurity is not only about recognising the perfectly crafted phishing email. Risky behaviour often hides in ordinary situations precisely because everything around it looks normal. So: have a look around. What would you spot?
Game 2: Shoot the Weak Passwords
The second game is a little less subtle. No, it is a silly shooter: Shoot the Weak Passwords / Schiesse die schwachen Passwörter ab.
Weak passwords appear. You know what to do. ;-) No twenty-minute lecture about uppercase letters, special characters and password policies. Just a small game around something almost everybody in cybersecurity has been talking about for years. And yes, sometimes shooting the problem is simply more satisfying than another PowerPoint slide about it.
Play online or take them into your LMS as SCORM packages
Both security awareness games are built as editable HTML courses, which gives awareness professionals two ways of using them. You can simply link employees to the online versions and let them play. Or download the editable SCORM 2004 packages, import them into your LMS and adapt the content to your own environment.
That was important to us. The Human Defense Community Kit should not just give you things to look at — it should give you material you can actually use.
The two games are part of the free Human Defense Community Kit, together with our posters, infographics, phishing simulation templates and more. So go ahead.
Spot something unsafe. Shoot a weak password. And perhaps make cybersecurity training feel slightly less like cybersecurity training.
Business is serious enough, let’s have some fun together this month. :-)
So long, Palo
