🎣 90% OF BREACHES START WITH A PHISHING EMAIL

Find out which staff
would click before
a hacker does.

Send safe, controlled test phishing emails to your own team. Track who clicks. Show them what they missed. Build real habits — not just a policy nobody reads.

Start training — $49/mo See how it works ↓
90%
of breaches start
with phishing
3.4s
average time before
someone clicks
37%
of untrained staff
click test emails
5×
lower click rate after
regular simulations

✅ This is a training tool — not a surveillance tool

You are the owner. You choose who receives a test email, you approve every campaign before it goes out, and you control the entire process. Staff who click are shown a friendly training page — not reported, not punished. The goal is awareness, not catching people out.

How it works

You design the test. We send it safely.

Three campaigns per month. Every one requires your approval before a single email goes out.

01

Pick a template

Choose from pre-built scenarios — invoice, delivery notification, password reset, urgent HR message. Or write your own.

02

Add your staff

Enter the email addresses you want to test. Each person gets their own individual tracking link.

03

You approve, we send

Nothing goes out until you confirm. You see exactly what each person will receive before it's sent.

04

Clickers get trained

Anyone who clicks lands on a short, friendly training page — not an accusation. Just "here's what to look for next time."

05

You get the report

See exactly who clicked, how fast, and how your team improved compared to last month.

Example

What your staff actually receives

A realistic-looking email — designed to test, not to trick permanently. Everyone learns from it.

⚠️ THIS IS A BOSSBOT PHISHING SIMULATION — NOT A REAL EMAIL
Results

A report you can actually act on

After each campaign you receive a clear breakdown — who clicked, how fast, and what changed over time.

📊

Click rate by person

See exactly which staff members clicked and how quickly — so you know who needs the most support.

📈

Progress over time

Compare click rates month by month. Most businesses see a 60–80% drop after three campaigns.

🎯

Risk level per staff member

Low / medium / high risk label for each person based on their history across campaigns.

📋

Template effectiveness

Which scenario tricked the most people? Useful for knowing which attack types to focus training on.

Pricing

Simple. No per-user fees.

One flat price regardless of how many staff you test. Works standalone or with any BossBot plan.

PHISHING SIMULATION
$49
per month · cancel anytime
Activate now — $49/month
First campaign within 7 days · Cancel anytime
Questions

Frequently asked

Is this legal? ↓
Yes. You own the business and you are testing your own staff on your own systems. Phishing simulation is standard practice used by banks, hospitals, and corporations worldwide. You must have a legitimate employment relationship with the people you test.
Do staff know they might be tested? ↓
That's up to you. Many businesses mention in their security policy that phishing tests may happen — this alone improves awareness. Others prefer to test without warning for a more realistic result. Both approaches work.
What happens to staff who click? ↓
They land on a short, friendly training page that explains what to look for in phishing emails. There is no punishment mechanism. The goal is education — not catching people out.
Can I test just one person? ↓
Yes. You can run a campaign with one email address or one hundred — the price is the same. There are no per-user fees.
What templates are available? ↓
We include pre-built templates for common scenarios: invoice approvals, password resets, delivery notifications, payroll updates, urgent IT requests, and "reply to this email" credential harvesting. New templates are added regularly.
Get started

Run your first simulation this week

Most businesses are surprised by their first results. The second campaign always shows improvement. By the third, your team knows what to look for.

Start training — $49/month