Help employees recognise a suspicious email before it becomes an incident.
Safe, controlled campaigns give your team practical experience with realistic messages. See how people respond, reinforce good decisions and identify where extra guidance will help.
Test awareness in the real working environment
Training explains the warning signs. Simulations show whether those lessons carry across to the inbox, where urgency and familiarity can make a suspicious message feel convincing.
Realistic scenarios
Use carefully reviewed emails based on common workplace threats, without copying a customer’s real passwords or sensitive information.
Safe by design
No password form is used and no password is requested or stored. Campaigns are limited to the organisation that authorised them.
Useful reporting
Managers can review sent, opened, clicked and reported results and decide where follow-up guidance is needed.
Controlled from setup to reporting
Choose a plan
Create the company account and select the number of employees included.
Prepare delivery
We provide the sending domain and IP details your email administrator may need to approve.
Add employees
Enter the authorised recipients who belong to your organisation.
Choose a scenario
Select an approved template and proposed delivery time.
Campaign review
Cyber Awareness checks the scope and settings before launching the campaign.
Review results
Use the dashboard to see responses and plan practical follow-up training.
Approved templates based on familiar business risks
Unexpected Microsoft sign-in
A security-style notification tests whether an employee uses the message link or independently opens a known Microsoft address.
Supplier bank-detail change
A payment request tests whether changed banking instructions are verified through an established contact method.
Unexpected shared document
A document invitation tests whether the recipient checks the sender and context before opening an unexpected link.
See what happened without collecting passwords
Each campaign stays attached to the company licence. Results show the behaviour needed for awareness reporting while keeping the exercise focused on education.
- Campaign status and scheduled delivery
- Sent, opened, clicked and reported totals
- Approved recipient list for the organisation
- Follow-up guidance after a simulated click
Quarterly awareness campaign
Unexpected Microsoft sign-in
Example dashboard shown for illustration.
Designed for legitimate employee awareness exercises
Organisation approval
The purchaser confirms they are authorised to arrange simulations for the named organisation.
Campaign review
Customer drafts are checked before launch, including the organisation, recipients, template and timing.
Educational landing page
Employees who follow the link receive coaching about the warning signs instead of a request for credentials.
Email-system preparation: Microsoft 365 customers may need to configure Advanced Delivery for the Cyber Awareness sending domain and IP address. Equivalent allowlisting may be required with other email security providers. Instructions are provided during setup.
Choose the size of your organisation
All prices are in Australian dollars and include GST. Plans renew manually, with no automatic recurring charge.
Small Business
$99per year · up to 10 employees
Quarterly campaigns, approved templates and reporting.
Business
$199per year · up to 50 employees
Quarterly campaigns, approved templates and reporting.
Company
$299per year · unlimited employees in one organisation
Quarterly campaigns, approved templates and reporting.
Frequently asked questions
Does the simulation collect employee passwords?
No. Approved campaigns do not present a password form and do not request or store passwords.
Can anyone run a campaign against another company?
No. The purchaser must be authorised for the organisation, recipients must belong to that organisation and campaigns are reviewed before launch.
Will every message reach the inbox?
Email security systems are designed to stop suspicious messages. Your administrator may need to approve the simulation sender using the setup details we provide.
Can we use the simulations without buying the video training?
Yes. Phishing simulations are a separate product. The training course remains available as a complementary service.