How it works
Each simulation measures one thing: what people do when a suspicious message lands.
Realistic scenarios
Portal spoofs, bursary scams and fake IT helpdesk requests modelled on the phishing people really see.
Three clear outcomes
Every response is recorded as clicked, ignored or reported, so you can see whether awareness is improving over time.
Immediate debrief
Right after responding, participants see the red flags they missed or spotted, plus short quizzes to reinforce the lesson.
Built around privacy
-
No real credentials stored
Simulated login forms never read or send what you type. The server only records that something was submitted.
-
Aggregate-only reporting
Reports show group trends, not individual risk profiles. Raw data stays on the server.
-
Invite-only access
There is no self sign-up. Your organisation issues accounts to administrators and participants.