Give people practice
Realistic simulations help staff recognise suspicious email before the next real attempt.
GRC login ↗Realistic phishing simulations and short, engaging training for your whole team, managed with uSAFE. Clear risk scores help you show leadership where you stand.
Managed by uSAFE
+Built for multiple organizations
+Auditable activity
Realistic simulations help staff recognise suspicious email before the next real attempt.
Short lessons and regular assignments turn awareness into an ongoing programme.
Give leadership, insurers, and auditors a clear view of participation and outcomes.
Run one-off, monthly, or quarterly campaigns with audience targeting, staggered sends, and a teachable moment after a click. Typed credentials are never stored or logged.
Assign courses with quizzes, due dates, retries, points, and certificates with public verification codes. Upload your own training files.
An Outlook Report Phish add-in helps staff flag suspicious email. Simulation reports receive automatic credit; real reports are triaged. The add-in is undergoing real-world Outlook testing.
Review risk by person, group, manager, and organization, informed by phishing results and training status. Follow progress across a 12-month trend.
Choose Full, Co-managed, Read-only, or None for uSAFE access. Client views are isolated and access levels are enforced.
Invite staff or import CSV files, assign roles, and manage access. Managers see their direct reports; learners see their training and certificates.
uSAFE sets up your organization and imports people by CSV or invitation.
Run simulated phishing campaigns on a schedule you approve.
Follow clicks with a teachable moment and assign regular courses with quizzes and certificates.
Review training status, phishing outcomes, and risk trends to guide your next steps.
Explore charts and tables with date ranges, CSV exports, saved reports, and favourites. Use your browser to print or save as PDF. An Executive Reports tab supports leadership review.
Risk by group, person, manager, and activity over time
Training activity by campaign or user
Risk, phishing results, and training status
Results by campaign or user
Susceptibility by group or campaign
Completed, in progress, and not started
Link clicks and data-entry events by campaign
Enrolment and status by campaign, course, or group
uSAFE staff manage the programme and review campaigns across clients, according to their role and each client’s access settings.
Your IT or security lead manages users, campaigns, reports, settings, the audit log, and uSAFE access.
Managers review direct reports. Learners take training, earn certificates, report phishing, and view the leaderboard.
Server-enforced organization boundaries and database row-level security separate client records.
Authenticator-app MFA is mandatory for admin roles in production. Sessions are revocable and expire when idle.
Append-only, hash-chained audit logs support verification. Uploads are type-checked and CSV exports guard against formula injection.
Plan, approve and track every IT change with clear risk ratings, approval workflows and a full audit trail, so changes go in smoothly and nothing is missed.
Keep policies, risks and controls in one place. Map them to the frameworks you follow and show auditors your evidence without the spreadsheet scramble.
Simulated phishing and short, engaging training that turns your people into your strongest defence, with one-click reporting and clear risk scores.
Detect, triage and resolve security incidents quickly with guided response steps, clear ownership and a timeline you can hand straight to leadership.
Training runs in the browser. Staff can optionally use the Outlook Report Phish add-in, which is still undergoing real-world testing.
uSAFE can manage the programme or work alongside your team. You choose the access level and can change it.
A simulation landing page offers a short, friendly lesson. Templates reject sensitive topics such as layoffs, pay cuts, and medical results.
No. Credentials typed into simulation landing pages are never stored or logged.
Yes. Upload your own files. SCORM/xAPI packages can be validated and stored; in-browser SCORM playback is not available.
Organization access is enforced on the server and through database row-level security. Staff access follows the level you set.
Send a uSAFE Callback Request with your team size and training needs. Our team will discuss the appropriate next steps.
Tell us about your organization and the awareness programme you want to build.
uSAFE Callback Request