Test your human firewall.
Run realistic phishing simulations that train, test and reveal risk, across every channel your people actually face.
- Email, SMS, QR & spear
- Template library + HTML editor
- Advanced tracking
Opens, clicks & data captured
Bot-aware tracking
Create high-conviction phishing, smishing, quishing and spear phishing simulations, with customizable email and landing page templates, advanced tracking, bot-aware delivery controls and multi-user company management.
See the phishing platform.
Dashboard, campaign builder, template editor and reports. Click any screen to enlarge it, or present the tour full screen.
Every campaign and every recipient, in one overview.Campaigns, targets and templates at a glance, with six months of activity and the status of every recipient.
One platform for every modern phishing scenario.
Simulate the attack paths users face today, across email, SMS, QR-based phishing and direct spear phishing, all from one controlled educational platform.
Email phishing
Launch fully trackable email campaigns using ready-made templates or custom-built HTML content.
Smishing
Test how users respond to phishing over SMS-style flows and mobile-first social engineering.
Quishing
Simulate QR-code based attacks and measure how easily users engage with scan-to-open paths.
Spear phishing
Generate trackable phishing links in seconds, with or without a landing page, for highly targeted simulations.
Template-driven by default. Fully custom when needed.
Move fast with prebuilt templates, or create highly tailored phishing content with the built-in editors. Your team gets both speed and flexibility, without depending on external tooling.
- Email templates with built-in tracking: reveal opens, clicks and engagement patterns.
- Integrated HTML editor: build your own emails and pages from scratch.
- Prebuilt library: ready-made scenarios for common awareness campaigns.
Template library
Go further than basic redirect pages.
Realistic simulations need more than a single fake page. Build multi-step landing journeys that follow real attacker flows, guide users through staged interactions and capture the exact data points you need for analysis.
- Multi-step landing pages: separate stages with their own logic.
- Step-specific triggers: control what happens, and when.
- Configurable capture: match the data points to your scenario.
Multi-step flows
Every campaign, scored end to end.
Follow each simulation from delivery to the moment a user acts, and see exactly where human risk sits across your organization.
Keep your results honest.
Security scanners, crawlers and email protection systems can distort campaign results. Configurable controls reduce false positives and preserve the integrity of your metrics.
Detection modes
Choose how the platform reacts to bot-like activity: block, suppress quietly, or log only.
Sensitivity levels
Tune how strictly rules apply, from obvious bots only to a stricter, high-filtering mode.
Scanner controls
Toggle protection layers such as reverse DNS and common mail-scanner handling per campaign.
Custom IP ranges
Maintain allow and block lists so known infrastructure never skews your numbers.
Is this agentless?
Yes. Campaigns run without endpoint agents, so you can launch simulations quickly.
Can we integrate with Jira and SIEM?
Yes. Use built-in connectors, webhooks, and an API-first approach for routing.
How do you keep results clean?
Bot-aware delivery controls, scanner handling and custom IP ranges reduce false positives.
Can we manage multiple companies?
Yes. Multi-user company management keeps campaigns and recipients organised per organization.
Find out who clicks, before an attacker does.
Run a realistic simulation, measure the response and turn the results into training that sticks.