Skip to content
Aspire SAT
ASAT · AI phishing simulation

Phishing simulation for email, SMS, voice and deepfake attacks

Generate realistic phishing tests with AI in minutes, run them across every channel attackers use, and give each person a two-minute lesson the moment they fall for one.

30 days · 5 users · No credit card
Phishing dashboard · Enhanced presentation with sample data
  • AI-generated scenarios
  • Immediate coaching
  • Connected risk insights

Trusted by security teams at

  • BAE Systems
  • City of Burbank
  • Cloud Himalaya
  • Midland Bank
  • Mutual Trust Bank
  • ONY
  • Special Security Force, Bangladesh
  • Technuf
  • Washington County, Maryland
Why most phishing tests miss

Why most phishing tests miss

Most phishing tests send the same fake email to everyone once a quarter. Attackers send a different one to each person, on whichever channel works. ASAT tests the way attackers work, and teaches at the moment of the mistake. Phishing-report rate at a regional bank: 8% to 41% in 9 weeks. That is one customer example, not a universal outcome. Published phishing plans start at $1.00 per user per month in the 5,000–9,999-user band.

See it in practice
Built around the work

Build a realistic phishing simulation
in minutes, not hours.

Every lure is generated fresh, so employees can’t learn to spot a template. Hundreds of ready-made templates are there too, when you want them.

01 / 06

Generate phishing template

Pick a persona, tactic and difficulty. AI writes the email and builds the landing page. Set attacker persona, target industry, tactic, objective, payload, difficulty, language and layout.

Put the idea into practice
INSIDE THE WORKFLOWFrom an idea to a safe exercise
  1. 01

    Persona · Supplier

  2. 02

    Tactic · Urgent payment

  3. 03

    Email + matching landing page

Illustrative workflow
How it works

How ASAT phishing simulation
works.

  1. 01

    Generate

    Pick a persona, tactic and difficulty. AI writes the email and builds the landing page.

  2. 02

    Launch. Coach.

    Target by department, role or risk group, and schedule it to run on its own. Anyone who clicks or enters details gets a two-minute lesson on that exact lure.

  3. 03

    Measure

    Clicked, reported and ignored results arrive in real time and update each person’s risk score.

From a feature to a decision

A realistic situation.
A chance to practise.

Explore a sample scenario and the reasoning behind a safer response.

AI phishing scenario

Urgent: supplier payment before 3pm

Hi, I’m boarding shortly and need the attached supplier invoice paid today to avoid a penalty. Please review and approve through the portal below. Keep this between us until it’s done.

The sender domain isn’t your company’s.A tight deadline to stop you checking.A request to keep it secret.
Illustrative learning scenario
A moment to practise

What would you do next?

Choose a response to see the learning behind the decision.

The habit to build

Next time: report it with one click. Reporting lowers your risk score.

What the program builds

A campaign ends.
The learning keeps going.

01

Report, don’t just avoid

Make reporting part of the safer response. Reporting a simulation improves the employee’s risk picture.

02

Coach at the moment

Explain the specific clues while the employee still remembers the message and their decision.

03

Follow the behavior

Three or more simulation clicks in 30 days can trigger a focused learning path.

Designed for your team

Where this fits.

  • Banks and finance teams handling payment requests
  • Healthcare, government and telecom organizations
  • Managed service providers and mid-market security teams
A closer look

Good questions.
Clear answers.

Understand the details, the learning objectives and how phishing simulation fits your program.

Talk to our team
Can AI generate both a phishing email and its landing page?

Yes. Choose the attacker persona, tactic, difficulty and other campaign settings to generate a phishing email and matching landing page. Ready-made templates are also available.

Does phishing simulation include SMS, voice and deepfake video?

ASAT supports these channels alongside email. SMS and voice are included in the Diamond plan; deepfake availability varies by plan. Check the current pricing page or ask the team to confirm your package.

What happens when an employee clicks a simulation?

A short lesson explains the clues behind that lure at the point of failure. Simulation responses update the employee’s human risk profile, and repeated mistakes can lead to a focused learning path.

Which campaign results can administrators review?

Review sent, opened, clicked, entered-details, reported and ignored events as a campaign runs. Live alerts show individual activity and lesson assignments. Department views help compare Finance, executives, Operations and IT. Employees who click three or more simulations in 30 days are flagged for a focused path, while responses update individual and department risk views.

What do the four phishing simulation plans cost?

For 5,000–9,999 users, the published monthly rates per user are Silver $1.00, Gold $1.08, Platinum $1.17 and Diamond $1.25. These are large-team rates: smaller teams pay more per user, up to $2.58 for 15–24 users. Check the pricing page for your selected plan and employee range.

What does Silver include?

Silver includes email simulations, quarterly campaigns, 50 premium templates plus AI generation and standard support. The published price is $1.00 per user per month for 5,000–9,999 users.

What does Gold add?

Gold adds attachment scenarios, monthly campaigns, 100 premium templates plus AI generation and priority support. The published price is $1.08 per user per month for 5,000–9,999 users.

What does Platinum add?

Platinum adds data-entry landing pages, campaigns every two weeks, 500 templates plus AI generation and a dedicated security advisor. The published price is $1.17 per user per month for 5,000–9,999 users.

What does Diamond add?

Diamond adds SMS and voice simulations, unlimited campaigns and templates, and a Virtual CISO partnership. The published price is $1.25 per user per month for 5,000–9,999 users. Deepfake simulation availability varies by plan; confirm it for your package.

What is included in every plan and the free trial?

All four plans include point-of-failure micro-lessons, a dark-web scan and directory sync. Every plan starts with a 30-day free trial for five users, with no credit card required.

How are deepfake video simulations created?

Upload a short clip of an executive. AI builds a photorealistic avatar. No technical skills needed. Send it as a simulated video request. See who watched, who acted and who reported. Deepfake simulation availability varies by plan.

How does the AI voice agent work?

Record about 30 seconds of speech. Choose targets, script and urgency. An AI agent calls each person in that voice and answers questions live. See who complied, questioned or reported. A lesson follows the call. SMS and voice simulations are included in the Diamond plan.

How do SMS simulations work?

AI writes texts that mimic banks, couriers and payment apps. Links open mobile landing pages built for small screens. Run them in your workforce’s languages and scripts. See who tapped, who entered details and who reported. SMS and voice simulations are included in the Diamond plan.

What are the four stages of a phishing campaign?

1. Generate: Pick a persona, tactic and difficulty. AI writes the email and builds the landing page. 2. Launch: Target by department, role or risk group, and schedule it to run on its own. 3. Coach: Anyone who clicks or enters details gets a two-minute lesson on that exact lure. 4. Measure: Clicked, reported and ignored results arrive in real time and update each person’s risk score.

How does this differ from a traditional phishing test?

Replace the same email for everyone with a fresh AI-written scenario, and email-only practice with the channels your plan supports. Scheduled campaigns replace manual quarterly sends. An immediate lesson replaces a score sheet, live results replace next-month reporting, and published plans replace price-on-request buying.

Your next step

Make the next click
a safer decision.

Bring your team’s priorities. We’ll walk through the scenarios, learning and insights that fit your program.

A useful conversation.
Built around your team.

  • Discuss your audience and goals
  • Explore relevant product workflows
  • Confirm the right plan and next steps
Compare published plans