Sequences
Design phishing journeys that branch on behavior
A single test tells you who clicked. A sequence decides what happens next — wait, branch on what each person did, and deliver the right training or a second nudge. Every send is a fully tracked campaign.
Sequence
Send
Password reset lure
Tracked campaign · Day 0
Wait
3 days
Let behavior settle
Branch
Clicked the link?
Split on behavior
Clicked
Assign training
“Spot the phish” course
No click
Send a nudge
Softer second touch
Measure
Risk score updated
Per person, over time
Four step types, endless paths
A sequence is a handful of step types arranged into a path. Every send is a real campaign — its own template, landing page and measurement.
Send email
Every send is a real, fully tracked campaign — its own template, landing page, sending domain and post-click action. Opens, clicks and submissions flow into the same funnel.
Wait
Hold the journey for hours or days between steps. Give behavior time to settle before you branch, so the next touch lands when it actually matters.
Behavior branch
Split the path on what each person actually did: opened, clicked, submitted, reported, or no response. Everyone continues down the branch they earned.
Assign training
Drop a course into the flow the instant someone qualifies. Clickers get the teachable moment; the rest keep moving — no manual list-building.
Starters, not blank pages
Begin from Blank, Click → Train, Two-touch nudge, or Report & reward. Each is a working sequence you can reshape in minutes.
Measured end to end
Because each step is a tracked campaign, the whole journey rolls up into per-person timelines and a risk score you can trend quarter over quarter.
What a designed sequence looks like
From lure to lower risk — five steps that adapt to each person.
- 01
Send the lure
Kick off with a tracked phishing campaign — pick a template, landing page and sending domain.
- 02
Wait 3 days
Pause the sequence so real behavior — opens, clicks, submissions — has time to land.
- 03
Branch on the click
Split the audience: everyone who clicked goes one way, everyone who didn’t goes another.
- 04
Train or nudge
Clickers get an assigned course. The rest get a softer second-touch reminder.
- 05
Measure
Every step feeds the funnel and each person’s risk score, so you can prove the journey worked.
One-shot test vs. designed journey
One email tells you who clicked. A journey decides what to do about it.
One-shot test
- One email, one moment — then it’s over
- The same follow-up for everyone, clicker or not
- Training assigned by hand from an exported list
- You see who clicked, but not what to do next
Designed journey
- Multiple touches that adapt as behavior changes
- Clickers, reporters and no-shows each get their own path
- Training fires automatically the moment someone qualifies
- A tracked funnel and risk score for the whole journey
Sequences, answered
Is each step in a sequence a real campaign?
Yes. Every Send step is a fully tracked phishing campaign with its own template, landing page, sending domain and post-click action. Its opens, clicks and submissions feed the same funnel and reports as a standalone campaign.
What can a branch split on?
A behavior branch routes each recipient by what they did with the previous step: opened, clicked, submitted credentials, reported the message, or gave no response. Each outcome flows down its own path.
How is a sequence different from Autopilot?
Sequences are journeys you design step by step for a specific audience. Autopilot is a hands-off program that keeps sending on a cadence you set. Many teams design a sequence, then let Autopilot run it continuously.
Can I start from a template instead of a blank canvas?
Yes. Pick a starter — Blank, Click → Train, Two-touch nudge, or Report & reward — and reshape it. Each starter is a working sequence, not just an outline.
Stop testing. Start designing the journey.
Turn a one-off click into a path that trains the right people automatically — and proves human risk is falling.