People security
Social Engineering & Phishing Tests
Most breaches start with a person, not a server. We run realistic, pre-approved phishing emails and phone calls to see how your team responds, then give you clear steps to reduce the risk.
- Written authorization before testing
- Report in plain English
- Retest included
PENTEST-REPORT.pdfSAMPLE
Executive Summary — Acme Dental Group
Scope: external network + patient portal
CRITICALSQL injection in portal login allows access to patient records
HIGHVPN appliance running firmware with known remote exploit
MEDIUMNo multi-factor authentication on email admin accounts
LOWVerbose server banners disclose software versions
Fix guidance: step-by-stepRetest: INCLUDED
Illustrative example of the report format. Company and findings are fictional.
What we test
What's included in social engineering & phishing tests
Every test is performed by experienced human testers, backed by automated tools. We only test systems you've approved in writing.
- Phishing email campaigns tailored to your business
- Fake login pages that measure who enters passwords
- Phone pretexting, such as fake IT support calls
- Text message (smishing) tests
- Checks on whether staff report suspicious messages
- Optional in-person tests for office access
- Results by department, without shaming individuals
Who it helps
Who needs this service?
If any of these describe your business, this test is a smart place to start.
- Businesses with staff who handle payments or invoices
- Companies whose insurers ask for phishing training
- Offices that want to measure the value of security training
- Any business that has had a phishing or wire-fraud scare
What you receive
Your deliverables
Everything you need to fix issues and prove due diligence.
Executive summary
A plain-English overview of your risk for owners and leadership.
Detailed findings & fixes
Every issue with a severity rating, evidence and step-by-step fix guidance.
Debrief call & free retest
We walk you through the results, then verify your fixes and update the report.
Our process
How it works
Fixed price, clear timeline, no surprises.
Free scoping call
We learn your goals, systems, and deadlines, then send a fixed-price quote.
Rules of engagement
You approve scope, dates, and contacts in writing. Nothing is tested without authorization.
Testing
Certified testers combine automated scanning with hands-on manual attacks.
Report & debrief
Plain-English executive summary, technical findings, and a live walkthrough call.
Free retest
After you fix issues, we verify the fixes and update your report.
FAQ
Social Engineering & Phishing Tests FAQ
More questions? Call (727) 340-3921 (open 24/7) or email us.
Will employees know they're being tested?
Leadership approves every test in advance. Staff aren't told the details, so the results show how they would really respond.
Do you name the employees who click?
You choose. Many clients prefer results by department, with individual follow-up training for people who clicked.
How often should we run phishing tests?
We recommend at least twice a year, and after any security training, so you can measure improvement over time.
More services
Other penetration testing services
Free 30-minute scoping call
Request your free penetration testing consultation
Tell us about your environment. A senior tester will reply within 24 hours with scope options and a fixed-price quote. No obligation.
- Fixed-price quote before any work begins
- Mutual NDA available on request
- Written rules of engagement and testing windows you approve
We're open 24/7. Prefer to talk now? Call (727) 340-3921