S—04

Social Engineering

People are part of your attack surface. We run realistic, authorized campaigns to measure how your team responds, then turn what we learn into training that fits your organisation.

For
Organisations measuring human risk.
Typical duration
[TYPICAL DURATION]
Format
Remote worldwide
Based in Tashkent
Price
Fixed, agreed after a scope call

What we test.

  1. 01Email phishing campaigns with agreed scenarios
  2. 02Phone and messenger pretexting
  3. 03Credential-entry tests that record submissions, never the passwords
  4. 04Reporting behaviour: who noticed, who escalated
  5. 05Awareness training based on the campaign results

How an engagement runs.

  1. 01

    Scope & authorization

    We agree scenarios, targets, limits and what is off-limits. Every campaign runs under signed authorization.

  2. 02

    Preparation

    Pretexts and infrastructure built for your context, reviewed with your contact before launch.

  3. 03

    Campaign

    Controlled execution, with a stop condition agreed in advance and no collection of real passwords.

  4. 04

    Report & training

    Aggregated results without naming individuals, and a training session built on what actually happened.

What you receive.

  1. 01Campaign report with aggregated, anonymised results
  2. 02Analysis of what made each scenario work or fail
  3. 03Awareness training session for your team
  4. 04Recommendations for process and technical controls