Phished

What it does

Phished is a Human Risk Management (HRM) and security awareness training platform built to reduce employee-driven security incidents through continuous behavioral change rather than one-off annual courses. It combines automated, personalized phishing simulations, gamified micro-learning, and a proprietary Behavioral Risk Score that quantifies each user's and the organization's cyber resilience. The patent-pending Phished Assistant adds inbox-side isolation, coaching employees in the moment they interact with a suspicious email.

How it works

The platform runs continuous, automated phishing campaigns whose difficulty and content adapt to each user's skill and risk level, and delivers a short nanolearning the moment someone clicks a simulated attack. Phished Academy supplies gamified, bite-sized courses covering topics aligned to NIST, HIPAA, and PCI, while the Behavioral Risk Score tracks behavior change over time. More than 20 reports break down human risk by user, department, location, and country. Phished connects to Microsoft 365 and Google Workspace and syncs users automatically from identity providers such as Okta and Ping Identity, adding a one-click report button and inbox-side email isolation.

Credentials and traction

Phished is ISO 27001 certified (certificate 30050399) and holds a SOC 2 Type II (ISAE 3000) report and a Cyber Essentials certificate, and is GDPR compliant. The platform serves more than 6,500 businesses and 250 managed service provider partners across Europe, North America, and APAC, including VRT, Kinepolis, and Antwerp University Hospital. Content is delivered in English, French, Dutch, Spanish, and German, targeting European organizations that need localized human-risk training.