5 realistic phishing templates, an answer key, a click-tracking sheet, and a 15-minute team debrief script. No vendor. No contract. About 30 minutes to run.
How it works
No simulation platform. No vendor sign-up. Just a PDF, your email client, and your team.
Get the 10-page PDF instantly. Read the how-to guide on page 2, get exec sign-off, and pick your templates.
Customize the 5 templates with your team's names, send them from a personal email account, and track who clicks using a simple Google Form link.
Use the 15-minute script on page 10 to walk through results as a team. No blame. Pure learning. Celebrate the reporters.
Inside the kit
Each template includes the email body, sender spoofing notes, and red flags. Ready to customize and send.
Spoofs QuickBooks billing. Urgency + payment link. Industry avg click rate: 24–32%
Vendor ImpersonationSpoofs Microsoft security alert. Fake 15-min expiry. Avg click rate: 18–28%
Credential HarvestGmail spoofing a personal CEO account. "Don't call me" control tactic. Avg click rate: 10–20%
Business Email CompromiseSpoofs Google Drive share. "Confidential draft" bait. Highest click rate: 40–52%
Curiosity-BasedSpoofs your own IT team. "Account disabled in 24 hours." Avg click rate: 28–38%
Authority ExploitationFree download
Enter your work email and we'll send the 10-page PDF instantly. No sales call. No commitment.
Includes 5 templates, answer key, click-tracking sheet, and debrief script. Instant delivery to your inbox.
Why run a phishing test?
Until you test your team, you don't know where the gaps are. The attacker does.
94% of all malware is delivered via email. Your inbox is the #1 attack surface.
Untrained teams click 20–35% of simulated phishing emails. After training: under 5%.
Average SMB breach cost: $4.9M (IBM 2024). Most start with one employee clicking a link.
A phishing test takes 30 minutes to run and gives you real data about your team's risk.
"We ran the test on a Friday afternoon. By Monday, I had results that completely changed my perspective on what our team actually knows. Three people clicked on the CEO gift card email — including my most senior manager. We booked a SecurEveryone session that week."
— Operations Director, Regional Property Management Firm (28 employees)