Managed service
Managed Phishing Simulation Service
Our team designs, launches and reports on simulated phishing campaigns for you, then teaches the employees who click. You share the employee list; we run the programme and tell you where the human risk is.
What the service is
A managed phishing simulation service runs the whole simulated phishing cycle on your behalf: realistic templates and landing pages, campaigns on a schedule, a lesson for anyone who clicks, and reporting on click rate, report rate and per-employee risk.
The difference from a self-serve platform is who does the work. On the phishing simulation platform, your team builds templates, plans campaigns and chases results. With the service, our team does it, using public information to target each employee the way a real attacker would, and changing the scenarios each quarter based on the results. To compare vendors first, read our guide to the best phishing simulation tools, or see how the service fits into human risk management.
What is included
- OSINT and social profiling across the organisation, so each lure fits the person who gets it
- Phishing templates and landing pages built around your own brands, suppliers and tools
- Scheduled campaigns across email, SMS and voice, with spear phishing and BEC scenarios
- A short lesson for anyone who clicks, shown at the moment of the click
- A quarterly review that changes the next campaigns based on what the data shows
- Reports on click rate, report rate, repeat clickers and risk by department
How it works
Step 1
You share the employee list
Names and email addresses, plus phone numbers if you want SMS and voice tests.
Step 2
We profile and build
Our team researches what an attacker could learn about your organisation and builds the lures and landing pages.
Step 3
We launch and teach
Campaigns go out on the agreed schedule. Anyone who clicks sees a lesson about the signs they missed.
Step 4
You get the results
A report your leadership can read, and a plan for the next round aimed at the people and teams who need it.
What the reports measure
Report rate
How many people report a simulated attack instead of ignoring it, tracked month by month.
Repeat clickers
Who falls for a second or third simulation, so their next lessons target exactly that.
Data submitted
Who enters a password or other data on a simulated page, not only who clicks.
Training content for the whole workforce is covered on phishing awareness training.
Frequently asked questions
What is a managed phishing simulation service?
A programme in which an outside team runs your simulated phishing for you: it designs the lures and landing pages, schedules and launches the campaigns, teaches the employees who click, and reports click rate, report rate and risk by person and team back to your security team.
How is the service different from the phishing simulation platform?
The platform is self-serve: your team builds the campaigns, picks templates and reads the results. With the service, PhishGrid's team does that work. Teams with time and expertise usually choose the platform; lean teams choose the service. Both use the same product, and you can start on the free plan and move to the service later.
What happens if an employee clicks a simulated phishing link?
Nothing harmful. The link opens a safe page that explains what just happened and which signs were missed. The click is recorded and the employee gets a short lesson. No real credentials are kept and no malware is involved.
Which channels does the service cover?
Email, including spear phishing and business email compromise scenarios, plus SMS and voice. The mix is agreed with you before the first campaign.
What do we need to provide?
The list of employees to include, the channels you want tested, and a contact on your side to approve the scenarios and receive the reports.
Want us to run it?
Tell us how many employees and which channels, and we will propose a first campaign.
Talk to us