Boxphish

Boxphish is a cyber security awareness training and phishing simulation platform designed to improve employee cyber resilience across organisations. **Phishing Simulations:** The platform provides a library of ready-made phishing email templates, as well as the ability to create custom templates. Results are tracked via a reporting suite. When an employee clicks a simulated phishing link, they are shown either an educational landing page with tips on identifying phishing, or a 404-error page for organisations that prefer employees remain unaware of the simulation. Template content is informed by real-time phishing trends sourced through a partnership with an email security provider. **Security Awareness Training:** Employees can be enrolled onto automated learning journeys delivering short (3–5 minute) video-based training modules, each followed by a quiz to reinforce retention. Training content aligns with guidance from the UK National Cyber Security Centre (NCSC) and covers topics including phishing identification, malware, social engineering, GDPR, and data privacy. A library of supplementary resources such as posters and infographics is also available. **Analytics & Reporting:** The platform includes pre-built dashboards and configurable reports for tracking phishing simulation results, course completion rates, and department-level risk. Reporting supports both internal security management and board-level compliance evidencing. **Additional Features:** Users can report suspected phishing emails directly from their inbox via a phish report button. The platform supports automated or on-demand delivery of simulations and training, and custom content creation is available for organisations with bespoke requirements.