I design and execute controlled phishing simulation campaigns to measure your organization's susceptibility to social engineering — providing real data on click rates, credential submission rates, and security reporting behavior by department.
Campaign process: threat-relevant pretext design tailored to your industry and current events; credential harvesting lure page creation; delivery infrastructure configuration to bypass common email filters (SPF/DKIM/DMARC aligned); per-user click and submission tracking without storing actual credentials entered; and simulation of macro/payload delivery for advanced campaigns.
Deliverables: campaign results report with click rate, credential submission rate, and reporting rate broken down by department and role; email security control effectiveness assessment; high-risk user profile; and a security awareness improvement recommendation report.
Requires written authorization from executive or HR/security leadership, target email list, and your organization's email domain(s). All engagements use a standard authorization template — I provide it. Employee identities in the results report are handled according to your HR policy preferences.