Frequently asked questions

A phishing simulation is a harmless test email that mimics a real attack. You send it to your own team to see who spots it and who clicks. Nobody gets into trouble. It turns a real risk into a safe learning moment, and it shows you exactly where your team needs more practice.

Once a month works well for most companies. It keeps people alert without turning into noise they tune out. We keep our templates up to date and add new ones every month, so each test feels new instead of the same email people have already learned to ignore. With autopilot the timing is handled for you.

Yes. We host in the EU, collect only what we need to run the simulations and training, and we are built around data minimization. You stay in control of your data. We do not sell it or use it for anything beyond helping your team get better at spotting phishing.

It is built for them. Autopilot exists precisely because small IT teams do not have hours to spend scheduling tests and chasing results. Set it up once and it keeps everyone learning on its own. You can be running your first simulation the same day you start.

It is short, practical training that teaches people how to recognise phishing and other common attacks. Ours is written by experts, kept up to date with new modules added every month, and tailored to each employee based on how they did in the simulations. No two-hour videos. Just the stuff that sticks.

An algorithm tracks how each employee does and sets the difficulty of their next phishing simulation accordingly. People who report attacks get harder tests. People who click get gentler ones plus extra training. It all runs without you lifting a finger, so the whole team keeps improving.