Sequences
Design phishing journeys that branch on behavior
A single test tells you who clicked. A sequence decides what happens next — wait, branch on what each person did, and deliver the right training or a second nudge. Every send is a fully tracked campaign.
Sequence
Send
Password reset scenario
Tracked campaign · Day 0
Wait
3 days
Let behavior settle
Branch
Clicked the link?
Split on behavior
Clicked
Assign training
“Spot the phish” course
No click
Send a nudge
Softer second touch
Measure
Program trend updated
Team and authorized detail
Four step types, endless paths
A sequence is a handful of step types arranged into a path. Every send is a real campaign — its own template, landing page and measurement.
Send email
Every send is a real, fully tracked campaign — its own template, landing page, sending domain and post-click action. Opens, clicks and submissions flow into the same funnel.
Wait
Hold the journey for hours or days between steps. Give behavior time to settle before you branch, so the next touch lands when it actually matters.
Behavior branch
Split the path on what each person did: opened, clicked, submitted, reported, or no response. Everyone continues down the appropriate branch.
Assign training
Add a course the moment someone meets the selected condition. People who clicked receive timely guidance while everyone else continues on the appropriate path.
Starters, not blank pages
Begin from Blank, Click → Train, Two-touch nudge, or Report & reward. Each is a working sequence you can reshape in minutes.
Measured end to end
Because each step is a tracked campaign, the whole journey rolls up into program trends and authorized recipient histories.
What a designed sequence looks like
From simulated message to timely guidance — five steps that adapt to each person.
- 01
Send the simulated message
Start with a tracked phishing campaign — choose a template, landing page, and sending domain.
- 02
Wait 3 days
Pause the sequence so real behavior — opens, clicks, submissions — has time to land.
- 03
Branch on the click
Split the audience: everyone who clicked goes one way, everyone who didn’t goes another.
- 04
Train or follow up
People who clicked receive an assigned course. Everyone else gets a relevant follow-up.
- 05
Measure
Every step feeds the funnel and program trends, so you can show the journey’s impact.
One-shot test vs. designed journey
One email tells you who clicked. A journey decides what to do about it.
One-shot test
- One email, one moment — then it’s over
- The same follow-up for everyone, regardless of response
- Training assigned by hand from an exported list
- You see who clicked, but not what to do next
Designed journey
- Multiple touches that adapt as behavior changes
- People who click, report, or do not respond each receive an appropriate path
- Training fires automatically the moment someone qualifies
- A tracked funnel and risk score for the whole journey
Sequences, answered
Is each step in a sequence a real campaign?
Yes. Every Send step is a fully tracked phishing campaign with its own template, landing page, sending domain and post-click action. Its opens, clicks and submissions feed the same funnel and reports as a standalone campaign.
What can a branch split on?
A behavior branch routes each recipient by what they did with the previous step: opened, clicked, submitted credentials, reported the message, or gave no response. Each outcome flows down its own path.
How is a sequence different from Autopilot?
Sequences are journeys you design step by step for a specific audience. Autopilot is a hands-off program that keeps sending on a cadence you set. Many teams design a sequence, then let Autopilot run it continuously.
Can I start from a template instead of a blank canvas?
Yes. Pick a starter — Blank, Click → Train, Two-touch nudge, or Report & reward — and reshape it. Each starter is a working sequence, not just an outline.
Design the path, not another one-off test
Turn a single click into a path that delivers timely training and shows measurable progress.