Help employees recognize a suspicious email before it becomes an incident.
Safe, controlled campaigns give your team practical experience with realistic messages. See how people respond, reinforce good decisions and identify where extra guidance will help.
Test awareness in the real working environment
Training explains the warning signs. Simulations show whether those lessons carry across to the inbox, where urgency and familiarity can make a suspicious message feel convincing.
Realistic scenarios
Use carefully reviewed emails based on common workplace threats, without copying a customer’s real passwords or sensitive information.
Safe by design
No password form is used and no password is requested or stored. Campaigns are limited to the organization that authorized them.
Useful reporting
Managers can review sent, opened, clicked and reported results and decide where follow-up guidance is needed.
Controlled from setup to reporting
Choose a plan
Create the company account and select the number of employees included.
Prepare delivery
We provide the sending domain and IP details your email administrator may need to approve.
Add employees
Enter the authorized recipients who belong to your organization.
Choose a scenario
Select an approved template and proposed delivery time.
Campaign review
Automated safety checks confirm the scope and settings before the campaign is scheduled.
Review results
Use the dashboard to see responses and plan practical follow-up training.
Approved templates based on familiar business risks
Unexpected Microsoft sign-in
A security-style notification tests whether an employee uses the message link or independently opens a known Microsoft address.
Supplier bank-detail change
A payment request tests whether changed banking instructions are verified through an established contact method.
Unexpected shared document
A document invitation tests whether the recipient checks the sender and context before opening an unexpected link.
See what happened without collecting passwords
Each campaign stays attached to the company licence. Results show the behaviour needed for awareness reporting while keeping the exercise focused on education.
- Campaign status and scheduled delivery
- Sent, opened, clicked and reported totals
- Approved recipient list for the organization
- Follow-up guidance after a simulated click
Quarterly awareness campaign
Unexpected Microsoft sign-in
Example dashboard shown for illustration.
Designed for legitimate employee awareness exercises
Organisation approval
The purchaser confirms they are authorized to arrange simulations for the named organization.
Campaign review
Customer drafts are checked before launch, including the organization, recipients, template and timing.
Educational landing page
Employees who follow the link receive coaching about the warning signs instead of a request for credentials.
Email-system preparation: Microsoft 365 customers may need to configure Advanced Delivery for the Safer Cyber Habits sending domain and IP address. Equivalent allowlisting may be required with other email security providers. Instructions are provided during setup.
Choose the size of your organization
All prices are in US dollars. Plans renew manually, with no automatic recurring charge.
Small Business
$99per year · up to 10 employees
Quarterly campaigns, approved templates and reporting.
Business
$199per year · up to 50 employees
Quarterly campaigns, approved templates and reporting.
Company
$299per year · unlimited employees in one organization
Quarterly campaigns, approved templates and reporting.
Frequently asked questions
Does the simulation collect employee passwords?
No. Approved campaigns do not present a password form and do not request or store passwords.
Can anyone run a campaign against another company?
No. The purchaser must be authorized for the organization, recipients must belong to that organization and campaigns are restricted to the authorized organization and recipient list.
Will every message reach the inbox?
Email security systems are designed to stop suspicious messages. Your administrator may need to approve the simulation sender using the setup details we provide.
Can we use the simulations without buying the video training?
Yes. Phishing simulations are a separate product. The training course remains available as a complementary service.