0333 358 3808
Home › Phishing simulation

Phishing simulation: test your team safely

Simulated phishing emails show who would click in real life, then teach them on the spot. Run regularly, they measurably reduce risk.

Call 0333 358 3808Make an enquiry

How a phishing simulation works

We send realistic but harmless phishing emails to staff, based on the lures attackers actually use: delivery notices, shared documents, password expiry warnings, invoices and HR updates. If someone clicks or enters details, they see a short explanation of the warning signs. If they report it, that is recorded as a win.

What we measure

  • Click rate and credential-entry rate per campaign
  • Report rate, often the most important number
  • Time to first report
  • Trends by department and over time

Running it well

  • Start with a baseline test before any training
  • Vary difficulty and themes; avoid tricks that damage trust
  • Tell staff simulations happen, without saying when
  • Celebrate reporting and never shame clickers

Pair simulations with phishing awareness training for the best results.

How Forever Systems runs your training programme

We are vendor-agnostic. We will recommend the platform that suits your size, sector and budget, then run it for you so it actually happens month after month.

  • Baseline phishing test to measure where you start
  • Platform selection and set-up, with single sign-on and automatic user sync where available
  • A year-round schedule of short modules and simulated phishing campaigns
  • Reporting for the board, insurers and auditors, showing completion and click-rate trends
  • Joined-up defences: email security, MFA and endpoint protection so training is backed by technology

Forever Systems Ltd provides IT and cyber security services to UK organisations.

Want a baseline phishing test for your team?

Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.

Call 0333 358 3808Send an enquiry

Frequently asked questions

Is phishing simulation legal in the UK?

Yes, when run as part of a proportionate security programme with appropriate internal approval and data handling. We help you set it up properly.

Will simulated phishing get blocked by our email filter?

Platforms provide allow-listing guidance for Microsoft 365, Google Workspace and common secure email gateways. We handle that configuration.

How often should we run phishing simulations?

Monthly or at least quarterly, with varied themes, gives a reliable picture without causing fatigue.

More security awareness topics

HomeOverview of awareness training and how we run it.Cyber security awarenessThe fundamentals every employee needs.Training for employeesRole-based training and new-starter induction.Phishing awarenessTeach staff to spot and report phishing.Social engineeringVishing, smishing, pretexting and fraud.GDPR trainingData protection awareness for staff.Small businessAffordable, low-admin training for small teams.Information securityFor regulated and ISO 27001 environments.Training softwareHow to choose a training platform.