Decoy · Managed Phishing & Awareness
We phish your people
before criminals do.
Decoy is a fully managed phishing and awareness service. We run the campaigns, train the people who click, and report what changed. Your team does nothing except get harder to fool.
How it works
Managed end to end, not a platform you have to run
01 · Campaigns
We run the simulations
Monthly campaigns built on real, current lures: email, QR codes and text. Difficulty adapts to each person's track record.
02 · Training
Clicks become lessons
Anyone who clicks gets two minutes of training on the spot, about that exact lure. No hour-long courses nobody watches.
03 · Reporting culture
Reporters get rewarded
A one-click report button in the inbox, and recognition for the people who use it. The metric that matters is reports, not clicks.
04 · Proof
Quarterly board report
Click rates, report rates and repeat offenders over time, by department, in a report you can hand straight to leadership or your insurer.
Phishing investigation
Someone reports a suspicious email. We investigate it.
Every email your staff report goes to our analysts, not an unread IT inbox. We tell the reporter whether it's safe, and if it's real, we pull it from every mailbox and check whether anyone clicked.
Included in every Decoy plan
Available on its own
- 01ReportedOne click on the report button in Outlook or Gmail sends the email to us.
- 02AnalysedAn analyst checks the sender, links, attachments and headers.
- 03VerdictThe reporter hears back: safe, spam or malicious, with a short reason why.
- 04RemovedIf it’s malicious, we pull every copy from every mailbox and block the sender and links.
- 05CheckedWe find who clicked or entered a password, then reset and contain those accounts.
With Pulse: account containment happens straight away, inside the same incident, by the same analysts. How Pulse works →
Plans
Two plans, both fully managed
SME
Up to 500 people
Monthly campaigns, on-click training, report button, phishing investigation and a quarterly report. Priced per user, quoted on scope.
Enterprise
500 and up
Everything in SME plus spear-phish and executive campaigns, custom templates, a dedicated manager and results in your Pulse console.
