Report, don’t just avoid
Make reporting part of the safer response. Reporting a simulation improves the employee’s risk picture.
Auto · follows your device
Generate realistic phishing tests with AI in minutes, run them across every channel attackers use, and give each person a two-minute lesson the moment they fall for one.
30 days · 5 users · No credit cardMost phishing tests send the same fake email to everyone once a quarter. Attackers send a different one to each person, on whichever channel works. ASAT tests the way attackers work, and teaches at the moment of the mistake. Phishing-report rate at a regional bank: 8% to 41% in 9 weeks. That is one customer example, not a universal outcome. Published phishing plans start at $1.00 per user per month in the 5,000–9,999-user band.
See it in practiceEvery lure is generated fresh, so employees can’t learn to spot a template. Hundreds of ready-made templates are there too, when you want them.
Pick a persona, tactic and difficulty. AI writes the email and builds the landing page. Set attacker persona, target industry, tactic, objective, payload, difficulty, language and layout.
Put the idea into practicePersona · Supplier
Tactic · Urgent payment
Email + matching landing page
Target by department, role or risk group, and schedule it to run on its own. Choose a send window for your campaign.
Put the idea into practiceAudience · Finance
Learning objective · Verify payment
Delivery · Scheduled send window
Attackers now call, text and appear on video. ASAT lets your people meet each of those safely first, and see exactly how these simulations are made. SMS and voice simulations are included in the Diamond plan. Deepfake simulation availability varies by plan.
Put the idea into practiceEmail + mobile landing pages
SMS and voice · Diamond
Deepfake · Confirm your plan
No shaming and no waiting for next quarter’s course. The lesson opens straight after the click and explains the exact clues they missed, while they still remember clicking. Two minutes, about that exact lure. Risk score updates, and repeat clickers get a focused path. Reporting a simulation lowers a person’s score.
Put the idea into practiceA simulation is clicked
A two-minute lesson explains the clues
A focused path follows repeated mistakes
Clicked, reported and ignored results arrive in real time. Each one updates that person’s risk score and your department view, with repeat clickers flagged for follow-up. Track sent, opened, clicked, entered details and reported events with live alerts. Clicked 3+ simulations in 30 days: focused learning path assigned automatically.
Put the idea into practiceSent → opened → clicked
Entered details → reported
Repeat clicks → focused follow-up
Feed simulation outcomes into each employee’s risk score. Reporting improves the risk picture, while repeated risky actions trigger a focused learning path.
Put the idea into practiceIndividual response
Updated employee risk profile
Department insight and next steps
Pick a persona, tactic and difficulty. AI writes the email and builds the landing page.
Target by department, role or risk group, and schedule it to run on its own. Anyone who clicks or enters details gets a two-minute lesson on that exact lure.
Clicked, reported and ignored results arrive in real time and update each person’s risk score.
Explore a sample scenario and the reasoning behind a safer response.
Hi, I’m boarding shortly and need the attached supplier invoice paid today to avoid a penalty. Please review and approve through the portal below. Keep this between us until it’s done.
Illustrative learning scenarioChoose a response to see the learning behind the decision.
Next time: report it with one click. Reporting lowers your risk score.
Make reporting part of the safer response. Reporting a simulation improves the employee’s risk picture.
Explain the specific clues while the employee still remembers the message and their decision.
Three or more simulation clicks in 30 days can trigger a focused learning path.
Understand the details, the learning objectives and how phishing simulation fits your program.
Talk to our teamYes. Choose the attacker persona, tactic, difficulty and other campaign settings to generate a phishing email and matching landing page. Ready-made templates are also available.
ASAT supports these channels alongside email. SMS and voice are included in the Diamond plan; deepfake availability varies by plan. Check the current pricing page or ask the team to confirm your package.
A short lesson explains the clues behind that lure at the point of failure. Simulation responses update the employee’s human risk profile, and repeated mistakes can lead to a focused learning path.
Review sent, opened, clicked, entered-details, reported and ignored events as a campaign runs. Live alerts show individual activity and lesson assignments. Department views help compare Finance, executives, Operations and IT. Employees who click three or more simulations in 30 days are flagged for a focused path, while responses update individual and department risk views.
For 5,000–9,999 users, the published monthly rates per user are Silver $1.00, Gold $1.08, Platinum $1.17 and Diamond $1.25. These are large-team rates: smaller teams pay more per user, up to $2.58 for 15–24 users. Check the pricing page for your selected plan and employee range.
Silver includes email simulations, quarterly campaigns, 50 premium templates plus AI generation and standard support. The published price is $1.00 per user per month for 5,000–9,999 users.
Gold adds attachment scenarios, monthly campaigns, 100 premium templates plus AI generation and priority support. The published price is $1.08 per user per month for 5,000–9,999 users.
Platinum adds data-entry landing pages, campaigns every two weeks, 500 templates plus AI generation and a dedicated security advisor. The published price is $1.17 per user per month for 5,000–9,999 users.
Diamond adds SMS and voice simulations, unlimited campaigns and templates, and a Virtual CISO partnership. The published price is $1.25 per user per month for 5,000–9,999 users. Deepfake simulation availability varies by plan; confirm it for your package.
All four plans include point-of-failure micro-lessons, a dark-web scan and directory sync. Every plan starts with a 30-day free trial for five users, with no credit card required.
Upload a short clip of an executive. AI builds a photorealistic avatar. No technical skills needed. Send it as a simulated video request. See who watched, who acted and who reported. Deepfake simulation availability varies by plan.
Record about 30 seconds of speech. Choose targets, script and urgency. An AI agent calls each person in that voice and answers questions live. See who complied, questioned or reported. A lesson follows the call. SMS and voice simulations are included in the Diamond plan.
AI writes texts that mimic banks, couriers and payment apps. Links open mobile landing pages built for small screens. Run them in your workforce’s languages and scripts. See who tapped, who entered details and who reported. SMS and voice simulations are included in the Diamond plan.
1. Generate: Pick a persona, tactic and difficulty. AI writes the email and builds the landing page. 2. Launch: Target by department, role or risk group, and schedule it to run on its own. 3. Coach: Anyone who clicks or enters details gets a two-minute lesson on that exact lure. 4. Measure: Clicked, reported and ignored results arrive in real time and update each person’s risk score.
Replace the same email for everyone with a fresh AI-written scenario, and email-only practice with the channels your plan supports. Scheduled campaigns replace manual quarterly sends. An immediate lesson replaces a score sheet, live results replace next-month reporting, and published plans replace price-on-request buying.
Bring your team’s priorities. We’ll walk through the scenarios, learning and insights that fit your program.