Phishing
Simulation
See how your team responds to suspicious messages. Use realistic exercises and supportive follow-up to build confidence, without blame.
Overview
Measure the click. Then shrink it.
We design and run tailored campaigns, coach anyone who clicks in the moment, and report click and — crucially — reporting rates over time. Run as a one-off baseline or an ongoing programme that drives the numbers down quarter after quarter.
Coverage
What we run.
Multi-channel simulations with coaching and meaningful metrics.
- Tailored phishing campaigns
- Vishing (voice) & SMS (smishing)
- Credential-capture & payload pages
- Just-in-time coaching
- Click & report-rate metrics
- Repeat-offender tracking
- Board & management reporting
- Benchmarking & trends
FAQ
Phishing simulation FAQ
Scope, cost, and what happens next.
How much does a phishing simulation cost?
A one-off campaign typically starts around €2,000, with ongoing programmes priced by headcount and frequency. Use our estimator for a tailored figure.
What channels do you simulate?
Email phishing, voice phishing (vishing), and SMS phishing (smishing) — tailored to the channels your attackers actually use.
Is it safe and ethical?
Yes — campaigns are authorised, carefully scoped, and designed to coach rather than catch people out. Anyone who engages receives supportive just-in-time guidance.
What metrics do you report?
Open, click, and credential-submission rates, plus the all-important reporting rate, with trends over time and benchmarking.
How is this different from awareness training?
Simulation measures real behaviour under attack; training builds the skills. They work best together — and our managed programme combines both.
Will staff know it is a simulation?
Not in advance — that would defeat the purpose. A constructive debrief and coaching follow each campaign.
More questions about this service
How often should we run simulations?
Monthly or quarterly for a sustained effect; one-off campaigns are useful as a baseline or a point-in-time check.
Can you integrate with our email and tooling?
Yes — we configure campaigns to deliver reliably and can advise on allow-listing and reporting-button integration.
Related services
Explore more.
Ready to test your people?
A 30-minute scoping call costs nothing. One successful phish costs considerably more.
Book a short call Send an email