Phishing simulation
Launch realistic phishing campaigns with customizable templates, tracked links, and real-time credential capture analytics.
Learn moreHuman risk, measured
Defend your people, not just your perimeter
Simulate phishing, QR, USB and document attacks across every channel your employees touch — then see exactly where your human layer holds.
The threat landscape
The human element is still the widest door in.
68%
of breaches involve the human element
Verizon DBIR
449%
increase in vishing attacks
KnowBe4
40%
of phishing emails are AI-generated
Industry report
6
identity providers supported
15+
attack vectors available
8
QR destination types
Syncs users from the directory you already run
Microsoft Entra ID
Google Workspace
Okta
OneLogin
JumpCloud
LDAP / Active Directory
Test your people before attackers do. Build resilience where it matters most.
Attack simulation
Every channel attackers use, rehearsed safely.
Realistic simulations across email, QR codes, removable media, calendars and documents — tracked to the click.
Physical
USB drop simulation
Deploy tracked USB drives and see when and where they're plugged in, with full device fingerprinting.
Learn moreQR codes
QR code phishing
Tracked QR codes across 8 destination types, with scan analytics by device, location and browser.
Learn moreCalendar
Calendar invite simulation
Realistic invitations with tracked links to test awareness of social engineering via scheduling.
Learn moreDocuments
Attachment tracking
Invisible tracking in Office documents shows exactly when and where sensitive files are opened.
Learn moreCampaign management
Orchestrate multi-phase campaigns, not one-off blasts.
Combine phishing, QR codes and USB drops into scheduled sequences with A/B variants and a single view of results.
- Campaign orchestration
- Multi-step attack chains with scheduled delivery and A/B testing.
- Email templates
- A visual editor with variable substitution and tracked elements.
- Sending profiles
- SMTP profiles with connection testing and SPF/DKIM guidance.
User intelligence
Know who is most exposed, and why.
Deep visibility into human risk through identity integration and analytics that update as every campaign lands.
- User sync & SSO
- Entra ID, Google Workspace, Okta, OneLogin, JumpCloud and LDAP.
- Segmentation & groups
- Dynamic segments by department, role or risk profile.
- Reporting & analytics
- Susceptibility trends and risk scores on live dashboards.
Platform
Built for the way enterprises deploy.
Isolation
Multi-tenant architecture
A dedicated database per organization, custom domains and independent configuration.
Talk to usBrand
White-label branding
Your logos, colours, email templates and domains — employees see an internal tool.
Talk to usControl
On-premise deployment
Run inside your own data centre or private cloud for full data residency.
Talk to usPricing
Priced to your organization.
Every plan includes core security testing. Tell us about your team and we'll tailor a quote.
Starter
For small teams getting started with security awareness.
Custom
Annual, per organization
Contact sales- Up to 100 users
- Phishing simulation
- Email templates
- Basic reporting
- QR code tracking
- Community support
Professional
Most chosenFor growing organizations with advanced security needs.
Custom
Annual, per organization
Contact sales- Up to 1,000 users
- Everything in Starter
- Campaign orchestration
- USB drop simulation
- Attachment tracking
- User sync & SSO (2 providers)
- Advanced analytics
- Priority support
Enterprise
For large organizations requiring full platform control.
Custom
Annual, per organization
Contact sales- Unlimited users
- Everything in Professional
- All 6 identity providers
- Custom domains
- White-label branding
- On-premise deployment
- Calendar invite simulation
- Dedicated account manager
- SLA guarantee
Compare all features
| Feature | Starter | Professional | Enterprise |
|---|---|---|---|
| Attack vectors | |||
| Phishing simulation | |||
| QR code tracking | |||
| USB drop simulation | — | ||
| Attachment tracking | — | ||
| Calendar invite simulation | — | — | |
| Campaign | |||
| Email templates | |||
| Sending profiles | |||
| Campaign orchestration | — | ||
| Landing page builder | — | ||
| Users | |||
| User limit | 100 | 1,000 | Unlimited |
| Identity providers | — | 2 | All 6 |
| SSO (SAML / OIDC) | — | ||
| Segmentation & groups | |||
| Platform | |||
| Custom domains | — | — | |
| White-label branding | — | — | |
| On-premise deployment | — | — | |
| Advanced analytics | — | ||
| Support | |||
| Community support | |||
| Priority support | — | ||
| Dedicated account manager | — | — | |
| SLA guarantee | — | — | |
What is CyberAssistant?
CyberAssistant is an enterprise security testing and awareness platform that simulates real-world cyber threats — including phishing emails, QR code attacks, USB drops, and document-based exploits. It helps organizations identify vulnerabilities in their human security layer before real attackers can exploit them.
How does phishing simulation work?
You create realistic phishing campaigns using our template builder, target specific user segments, and launch simulated attacks. The platform tracks who opens emails, clicks links, and submits credentials — giving you actionable data to measure security awareness and identify users who need additional training.
Which identity providers do you support?
CyberAssistant integrates with six major identity providers: Azure AD (Entra ID), Google Workspace, Okta, OneLogin, JumpCloud, and LDAP/Active Directory. User sync is automatic and supports both SAML 2.0 and OpenID Connect for single sign-on.
Is our data isolated from other organizations?
Absolutely. CyberAssistant uses a dedicated database per tenant architecture. Each organization gets its own isolated database instance, ensuring complete data separation. There is no shared data between tenants — your users, campaigns, and results are entirely private.
Can we deploy on our own infrastructure?
Yes. Our Enterprise plan includes on-premise deployment so you can run the platform inside your own data center or private cloud. This gives you full control over data residency and compliance requirements.
How long does setup take?
Most organizations are up and running within a day. Connect your identity provider, and users sync automatically. From there, you can create your first phishing campaign in minutes using pre-built templates or the drag-and-drop builder. No complex integrations or lengthy onboarding required.
Do you support custom branding?
Yes. Enterprise customers can fully white-label the platform with custom logos, favicons, email templates, and custom domains. Your employees interact with a branded experience that looks and feels like an internal tool — increasing engagement and trust in your security awareness program.
What kind of reporting is available?
The platform provides interactive dashboards with campaign analytics, user susceptibility trends, device and browser tracking, and geographic data visualization on interactive maps. Export reports as CSV for integration with your existing SIEM or GRC tools.
What attack vectors does CyberAssistant support?
Beyond email phishing, the platform supports QR code phishing (8 destination types), USB drop simulation, document attachment tracking (Word, Excel, PowerPoint), calendar invite simulation, and customizable landing pages. This multi-vector approach tests your organization against the full spectrum of social engineering threats.
How is pricing structured?
We offer three tiers — Starter, Professional, and Enterprise — each with custom pricing based on your organization's size and requirements. All plans include core security testing features. Contact our sales team for a tailored quote and to discuss which plan best fits your needs.
Find the gaps before someone else does.
Discover where your human security layer is vulnerable — then measure it closing, campaign by campaign.