For MSPs & MSSPs
Run awareness for every client from one place
Onboard a client in minutes, isolate their data completely, and let Autopilot keep the program running — while the REST API and MCP automate the parts you'd rather not click through.
One console for every client you run
Multi-tenancy, automation and deliverability — without the per-client busywork.
Multi-tenant with per-account isolation
Every client is a separate account with its own contacts, campaigns, domains and reports. Nothing leaks across tenants.
Three roles, cleanly scoped
Admin, Editor and Member roles let your team and your clients see exactly what they should — no more, no less.
REST API + MCP to automate onboarding
Spin up accounts, import contacts and launch campaigns programmatically. Roughly 60 MCP tools and a REST API at /api/v1 mean onboarding a client can be a script.
Autopilot on every client
Turn on Autopilot per account and each client gets language-matched simulations on a steady cadence — trained hands-off, no per-client babysitting.
Managed sending domains per client
Bring a domain per client; SPF, DKIM and MX auto-provision via Cloudflare and Postal, with hourly health checks so mail keeps landing.
Webhooks into your PSA/SIEM
Stream every event — HMAC-SHA256 signed, up to 5 retries — into your PSA, SIEM or ticketing so client activity shows up where your team already works.
Keep every client trained without touching a thing
Autopilot is automation, not guesswork: it picks a language-matched template, schedules by intensity, and an optimizer tunes timing and difficulty over time.
- Set intensity once — Autopilot keeps a steady cadence of simulations per client, so no account goes quiet.
- Language-matched by default — Polish recipients get Polish lures, English recipients get English — from the same 48-template library.
- An optimizer, not generative AI — it selects and schedules; it never writes fake emails. You stay in control of every template.
- Hands-off, not hands-tied — pause, retarget or take over any client program the moment you want to.
Add a client without adding a headcount
Manual per-client work
- Rebuild the same campaign in every client's tool
- Remember to send each client a simulation by hand
- Juggle separate logins and spreadsheets
- Chase DNS records for each new domain
- Copy results into tickets manually
Programmatic at scale
- Onboard a client with an API call or MCP command
- Autopilot keeps every account trained on its own
- One console, per-account isolation, three roles
- Sending domains auto-provision SPF/DKIM/MX
- Every event streamed to your PSA and SIEM
MSP & MSSP questions
How isolated is each client's data?
Fully. Every client is a separate account — contacts, campaigns, templates, domains and reports are scoped to that tenant, and roles control who on your team can see each one.
Can I automate client onboarding?
Yes. The REST API at /api/v1 and roughly 60 MCP tools let you create accounts, import contacts, build campaigns and turn on Autopilot from your own scripts or tooling.
How do results reach our PSA or SIEM?
Through webhooks. Subscribe to the events you care about and PhishSpot delivers them signed with HMAC-SHA256, retrying up to five times, so client activity lands in the systems your team already uses.
Turn awareness into a service you can scale
Book a demo to see multi-tenant management, the API and Autopilot across clients.