Our phishing tests use real-world tactics adapted to your industry. We offer:

• Customizable templates mimicking your vendors/partners
• Gradual difficulty levels from obvious to highly sophisticated
• Options for email, SMS (smishing), and voice (vishing) tests
• Spear phishing targeting specific roles or departments

Our approach focuses on education, not punishment. When someone clicks:

• They receive immediate feedback about what they missed
• Optional: They’re enrolled in micro-training on that threat
• Managers get aggregate data, not individual names (by default)
• We track progress over time to show improvement

We track multiple metrics before and after training:

• Phishing click rates and reporting rates
• Quiz scores and knowledge retention
• USB pickup rates in physical tests
• Department/role comparisons
• Year-over-year improvement

Absolutely. We prioritize safety with:

• No malware or harmful payloads in tests
• Clear labeling of training materials
• Opt-out options for all participants
• Secure handling of all collected data
• Compliance with all relevant regulations

We recommend:

• Monthly tests for high-risk organizations
• Quarterly tests for most businesses
• Immediate follow-up tests after major training
• Randomized timing to prevent anticipation
• Varying difficulty levels throughout the year

Yes. We maintain templates for:

• Financial services (fake wire requests, account alerts)
• Healthcare (patient records, HIPAA notices)
• Education (student data, password resets)
• Manufacturing (vendor invoices, shipping notices)
• And custom scenarios based on your needs

Our training covers essential topics:

• Identifying phishing emails and malicious links
• Safe handling of sensitive data
• Password hygiene and MFA best practices
• Physical security and clean desk policies
• Social engineering red flags
• Reporting procedures for suspicious activity

We conduct controlled physical security tests:

• Place branded USB drives in strategic locations
• Monitor who picks them up and where they’re plugged in
• Test QR codes posted in common areas
• Provide heatmaps of high-risk locations
• Include follow-up training on physical threats

Yes. Our reporting helps demonstrate:

• Regular security awareness training (for GDPR, HIPAA, etc.)
• Phishing testing programs (for cyber insurance)
• Employee participation rates (for audit compliance)
• Improvement metrics (for management reporting)

We begin with a consultation to:

• Understand your security awareness goals
• Identify high-risk areas to target
• Recommend an appropriate testing cadence
• Customize templates to your industry
• Set up reporting for your stakeholders