Skip to main content
For simulations to work, emails must reach the intended recipients. To make that possible we generate anonymised tags and placeholders from the information your organisation provides.
Our ethical phishing community does not know which companies receive their simulations, and they never collect or access the data resulting from them.

​
Pick how you import

CSV

Upload a file. Quickest to set up.

Microsoft Entra ID

We pull from your directory daily.

Google Workspace

Syncs automatically.

SCIM

Your identity provider pushes users to us.

​
Which one do I need

CSV is easier for short campaigns. For six months or longer, use a sync so joiners and leavers are handled without anyone re-importing.

​
Required and optional data

Country and Language are the only tags that are mandatory for launching a campaign. Everything else improves relevance. Adding the optional fields improves targeting and personalisation on the phisher side. For example, Firstname becomes a placeholder in the email, and Function title becomes a targeting tag.