AWARENESS TRAINING
Campaign · Q3 payroll notice
214 emails deliveredOpen rate 61%
Clicked the link12% · 26 people
Entered credentials3% · 7 people
Reported as phishing44% · 94 people

Your firewall is fine.
Your staff is the attack surface.

Ninety percent of breaches start with a click. PhishDrill sends safe, realistic simulated phishing emails to your own employees — with your organisation's authorisation — measures who clicks, who enters a password and who reports it, and trains people in the moment with a two-minute lesson, not a two-hour course.

View pricing → See how it works
90%of breaches start with phishing
-70%click rate after 6 months of drills
2minmicro-training, right after the click
1dashboard by department & site
THE REAL PROBLEM

Annual training
is forgotten by February

A slide deck once a year doesn't change behaviour. Repeated, realistic practice does — the same way fire drills do.

1 in 3

employees click a phishing link without training

€1.2M

average cost of a business-email-compromise incident

7 sec

median time from opening to clicking

5×

fewer clicks in teams that run monthly drills

HOW IT WORKS

Realistic. Safe.
Measured.

From template to metrics in a few clicks, with no risk to your real systems.

Template library

Fake invoices, payroll notices, shared documents, parcel deliveries, IT password resets — in Spanish and English, updated with real current campaigns. Or write your own.

Department-level targeting

Send finance the fake invoice and housekeeping the fake shift change. Realism is what makes the lesson stick.

Instant micro-training

Click the link and you land on a two-minute page explaining what just happened and what to look for. Delivered at the exact moment it matters.

Report button and phish-alert

A one-click 'Report phishing' button in Outlook and Gmail. Reporting rate — not click rate — is the metric that actually predicts resilience.

Metrics that management understands

Click rate, credential rate, report rate by department, site and over time. Who improved, who needs a second round.

Automated campaigns

Schedule a randomised drill every month and let PhishDrill vary templates, timing and targets. Set it once; get a report each quarter.

SET-UP

Up and running in
one hour

Import your users, whitelist our sending domains, pick a first campaign. No agents, nothing on endpoints.

01

Import your people

Sync from Microsoft 365, Google Workspace or a CSV. Group by department and site.

02

Whitelist and test

Add PhishDrill's sending domains to your mail filter so the drills arrive. Send yourself a test.

03

Launch a baseline campaign

One realistic template to everyone. This is your starting point — expect it to hurt a little.

04

Automate and improve

Monthly drills, automatic micro-training, quarterly report. Watch the click rate drop and the report rate climb.

PRICING

Cheaper than
one wire fraud

Priced per employee per month. Unlimited campaigns on every plan.

Starter
€1.50 / user / month
For small teams starting out.
  • Up to 50 users
  • Template library
  • Micro-training pages
  • Basic reporting
Enterprise
€0.80 / user / month
For groups and regulated sectors.
  • 500+ users
  • Multi-entity dashboard
  • SSO & directory sync
  • API & LMS export
  • Priority support

Not sure which plan fits, need more than Enterprise, or want PhishDrill bundled with other Dev Devices products? We will put a quote together for your setup.

Contact sales →

What would your
click rate be today?

Run a baseline campaign for up to 50 of your own employees and find out this week.

Request a quote →