Phishing Risk Simulator

Assess phishing susceptibility

Understanding how susceptible an organisation is to phishing helps target training and defences. This simulator helps assess phishing risk, so you can see where awareness is weakest and strengthen it.

Why measuring susceptibility helps

Phishing susceptibility varies across an organisation, and knowing where it is highest, which teams, which kinds of lure, focuses training where it will do the most good. Assessing risk through a safe, authorised simulation reveals the weak points that a real attacker would exploit, turning a vague concern into a targeted improvement plan. It also establishes a baseline to measure whether training is working over time.

Responsible assessment

This is for assessing and improving your own organisation’s resilience constructively, with consent, to build defence rather than to blame individuals. Used this way it measurably strengthens the human layer. This is for defensive assessment and education around systems you own or protect, or for authorised security testing and awareness, not for targeting others. It runs entirely in your browser, so nothing you enter is uploaded, which matters when the input concerns your own security posture.

Related tools

• Password Strength Checker — Measure password strength by entropy and pattern analysis rather than character-class rules. Checked entirely in your browser.
• Password Generator — Generate strong random passwords and passphrases in your browser using the Web Crypto API. Nothing is transmitted, logged or stored.
• Hash Generator — Generate MD5, SHA-1, SHA-256 and SHA-512 hashes in your browser. Compare checksums and verify file integrity with nothing uploaded to a server.
• Base64 Encoder/Decoder — Encode and decode Base64 in your browser, including URL-safe Base64 and UTF-8 text. Handles files and data URIs locally with nothing uploaded.