The platform
One platform for a complete phishing resilience program
PhishSpot runs realistic campaigns, delivers training at the moment of the click, and shows measurable progress over time. All in one place, in English and Polish.
Seven areas, one connected workflow
Every area shares the same contacts, sending domains, and reports. No separate tools to connect.
Phishing simulations
A six-step builder, over 10,431 ready-to-use scenarios, and a live HTML editor with merge tags and test sends.
Autopilot
Set the intensity once and PhishSpot keeps the cadence going, new hires included.
Sequences
Campaigns that unfold in stages: who opened or clicked decides the next step and the training that follows.
Security training
A course delivered the moment someone clicks — the teachable moment — with text, video and quiz blocks.
Reporting & analytics
The full funnel from send to training, team trends, and reports ready to export.
Deliverability & domains
Managed sending domains with automatic SPF, DKIM and MX, plus ready-made allowlists.
Integrations & API
Entra directory sync, Microsoft 365 SSO, signed webhooks, a REST API, and around 60 MCP tools.
Run the whole program from one place
Contacts, groups, campaigns, courses, domains, and reports live together. Give your team the right roles and run the entire cycle without leaving PhishSpot.
- Shared resources — the same audiences and sending domains feed campaigns, Autopilot, and sequences.
- Three roles: Admin, Editor, and Member. Each account is fully isolated, including many organizations at once.
- Exports on hand — reports to PDF, DOCX, Markdown, RTF, and CSV, straight from the dashboard.
From a new account to your first insight in an afternoon
Five steps, the same ones every program follows. PhishSpot removes the busywork between them.
- 01
Onboard
Set up your account, industry, and phishing-report inbox. Connect Microsoft Entra if you use it.
- 02
Add people
Import contacts from CSV or sync your directory, then organize them into groups.
- 03
Run
Launch a one-off campaign, an Autopilot program, or a branching sequence.
- 04
Teach
Whoever clicks gets a course or an awareness page, right when the lesson sticks.
- 05
Measure
Follow the funnel, per-person timelines, and trends. Export to PDF or Excel.
10,431+
Ready-to-send scenarios
English and Polish
2
Languages, end to end
UI, templates, reports & admin guide
6
Funnel stages tracked
Sent → … → Trained
10
Allowlist export formats
M365, Google, Mimecast & more
What the platform actually gives you
What can I actually do on the platform?
Run a complete phishing resilience program: build and send simulations, deliver training at the moment of the click, and measure progress over time. Contacts, sending domains, courses, and reports all live in one place.
Do I need separate tools for simulations and training?
No. Simulations, on-click training, sequences, and reporting are one platform on shared contacts and domains. Nothing to stitch together and no copying data between products.
Is it really bilingual?
Yes. The interface, the full scenario library, courses, reports, and the complete admin guide are available in English and Polish. The Polish content was written natively in Polish.
Can I run it across multiple client organizations?
Yes. Each client lives on its own isolated account, with three roles, a full REST API, and an MCP server — built with MSPs and MSSPs in mind.
See the whole platform in action
Book a 30-minute demo and we’ll build a live campaign with you for a test group. Prefer to explore first? Start a free trial.