Skip to content

Phishing Awareness Campaigns

Phishing awareness campaigns let you send safe, simulated phishing emails to your employees so they get real practice spotting threats — in a supportive, no blame way. It's one of the most effective ways to build lasting instincts.

The goal: practice, not "gotcha"

The point of a campaign is to help people learn, not to catch them out. When someone falls for a simulation, it becomes a gentle, timely teaching moment — far more memorable than a slide in an annual course. Keep the tone positive and your whole organization gets sharper over time.

Running a campaign (high level)

Creating a campaign is straightforward:

  1. Create a new campaign and give it a name.
  2. Choose a template. Pick from ready-made, realistic email templates, or craft your own with the built-in editor. Templates cover the kinds of lures employees really encounter.
  3. Choose who receives it. Target the whole organization or specific departments or groups.
  4. Schedule it and launch.
  5. Review the results as they come in.

What you'll see in the results

After a campaign runs, you get a clear picture of how your organization responded, so you can focus your follow-up training where it helps most:

  • Who reported the simulated email — the ideal response.
  • Who interacted with it and could use a little more coaching.
  • Overall engagement across departments, so you can spot patterns.

Use these insights to guide training and to track improvement over time with your reports and dashboards.

Good practice

  • Start with a pilot. Run a small campaign first to get comfortable.
  • Keep it realistic but fair. Choose templates that reflect genuine threats your people might face.
  • Follow up with learning, not blame. Pair campaigns with short training so the lesson sticks.
  • Repeat regularly. Occasional, ongoing practice beats a single big test.

Employees just need one instruction

From an employee's point of view, the guidance is always the same: if an email looks suspicious, report it. Campaigns simply give them safe chances to practise exactly that.