CASE STUDY

Swotzy strengthened security culture by 20% with tailored awareness training

Client

Certificates

ISO 27001

Swotzy is redefining last-mile logistics for small to medium enterprises. Instead of signing contracts with a dozen different carriers, businesses register once with Swotzy and instantly access delivery options from ten different providers – customs handled, logistics simplified.

But as the platform scaled, so did the complexity – especially when it came to securing their growing operation.

Challenge

Swotzy’s cofounder Jekabs and his team had built the MVP, proved the concept, and was now managing both the development team and the technical direction of the business. As a first-time founder – previously a developer and team lead – he found himself responsible for a wide range of IT concerns.

CyberUpgrade’s first conversation with Swotzy marked the beginning of a practical, hands-on collaboration. While Jekabs and his team were technically strong, they valued having an expert partner to provide clear, actionable guidance in cybersecurity and compliance.

Solution

From the start, CyberUpgrade focused on making security practical for Swotzy’s fast-moving team. After an initial walkthrough of their setup, the team identified key opportunities – from improving endpoint protection to implementing a password manager – and proposed steps that fit naturally into their existing workflows.

Security awareness training was introduced early, tailored to a young, distributed team. Compliance frameworks like NIS2, DORA, ISO 27001, GDPR, and SOC 2 require continuous, role-based security awareness training, and when it comes to strengthening security culture it is a must have.

Swotzy appreciated the delivery mechanism of CyberUpgrade training, which is delivered via a Slack or Teams chatbot in a microlearning format. This means users receive short, periodic interactions and quizzes tailored to their roles and responsibilities (such as developers), supporting effective learning adoption.

As Swotzy grew and began partnering with larger logistics providers, ISO 27001 readiness emerged as a strategic priority. Though not mandatory, it became important in building trust with partners.

"CyberUpgrade made security approachable from day one. Their Slack-based awareness training fit right into how we work and actually got people to engage - especially our developers. We saw at least 20% improvement in overall security culture without slowing the team down."

Jēkabs Hincenbergs, Co-Founder and CTO at Swotzy

Results

For a growing startup, balancing speed with structured security is a challenge – but Swotzy achieved real cultural change. With lightweight training, targeted tools, and support from leadership, security became a shared responsibility across the company.

This shift led to a measurable 20% increase in overall security culture, among all team members. Perhaps the most impactful outcome: Swotzy gained the oversight and structure of a security team without having to hire one. They made real progress toward security and compliance – while saving the cost and complexity of building it all in-house.

And CyberUpgrade integrated ISO 27001 compliance preparation into their day-to-day work, helping the team build toward certification without derailing product momentum.

€80K in cost savings

With net savings of over €60K (after accounting for CyberUpgrade’s solution cost).

Faster licensing process

Enabling FMpay to move forward with European expansion.

Stronger cybersecurity framework

Ensuring alignment with DORA requirements.

More resources allocated to business growth

Instead of compliance overhead.