phishsim
See the loop

About phishsim

Updated

phishsim explains how simulated phishing works as a security-awareness tool, and how to run a programme that is effective without being punitive. Since the subject is testing your own colleagues, transparency about the publisher comes first.

Who runs this site

SEQ SIA, registration No. 40203410806, Lastādijas iela 12 k-3, Riga, LV-1050, Latvia, trading as OffSeq. The company runs phishing simulations, social-engineering assessments and awareness training. Contact: support@offseq.com.

Who writes the guidance

SEQ SIA (OffSeq) is responsible for publishing, maintaining and updating this site. Guides carry no individual byline; the company is accountable for every page. Sources are listed so readers can check the basis for the guidance.

Editorial and ethical rules

  • We do not publish ready-to-send phishing templates, working lures or infrastructure instructions. The site explains how simulations are designed and measured, not how to run one against people who have not consented.
  • Simulation without the organisation's documented authorisation is not something we describe or endorse; the guidance assumes management sign-off and, where relevant, works-council or employee-representative consultation.
  • Click-rate and improvement figures are cited to their published source, and results that cannot be attributed are not used.
  • The "Updated" date changes only when the text changes, enforced by an automated content-hash ledger.

Commercial interest

We sell phishing simulation and awareness training. This site is therefore both an explainer and a route to our services, which is a bias you should factor in.

  • OffSeq links are our own service links, not a neutral comparison of platforms.
  • No simulation platform pays to be mentioned; there is no sponsorship, advertising or affiliate arrangement.
  • Several guides argue against things that would earn us more work – more frequent campaigns, harder lures, naming individuals – because the evidence does not support them.

Limits

This is not employment-law or data-protection advice. Simulating attacks on employees involves processing their personal data and, in some jurisdictions, consultation duties. Take local advice before you start.

Corrections

Corrections and challenges are welcome at support@offseq.com.