S—04
Social Engineering
People are part of your attack surface. We run realistic, authorized campaigns to measure how your team responds, then turn what we learn into training that fits your organisation.
01Scope
What we test.
- 01Email phishing campaigns with agreed scenarios
- 02Phone and messenger pretexting
- 03Credential-entry tests that record submissions, never the passwords
- 04Reporting behaviour: who noticed, who escalated
- 05Awareness training based on the campaign results
02Process
How an engagement runs.
- 01
Scope & authorization
We agree scenarios, targets, limits and what is off-limits. Every campaign runs under signed authorization.
- 02
Preparation
Pretexts and infrastructure built for your context, reviewed with your contact before launch.
- 03
Campaign
Controlled execution, with a stop condition agreed in advance and no collection of real passwords.
- 04
Report & training
Aggregated results without naming individuals, and a training session built on what actually happened.
03Deliverables
What you receive.
- 01Campaign report with aggregated, anonymised results
- 02Analysis of what made each scenario work or fail
- 03Awareness training session for your team
- 04Recommendations for process and technical controls