New
- Training history on the Employees page. Click any employee to see every training they’ve been assigned, with its status and due date. A new Training column shows who’s behind at a glance.
- AutoPhish calibration. Choose how difficult simulations should be, how sensitive their content can get, and which topics to avoid. Set it during setup or change it any time in program settings.
- AutoPhish review reminders. Get a heads-up by email, Slack, or both when each upcoming round is ready to review, two business days before it sends. You can turn reminders off in program settings.
- Red flags after a click. When an employee clicks a simulated phishing link, they now see the email they received with its warning signs pointed out, so the lesson is about the exact message they fell for. Finished reviews show up in the AutoPhish activity feed.
- Quicker testing for new hires. New employees get their first AutoPhish simulation about a week after they join, instead of waiting for the next scheduled round.
- Start over. You can reset an AutoPhish program back to setup from program settings.
Improvements
- AutoPhish controls up front. Pause and Resume now sit at the top of the AutoPhish page, and you can change how often rounds go out at any time.
- Clearer round details. Each round shows its real send dates, shows progress while its emails are being prepared, and lets you preview the exact email each recipient will get. Trend charts no longer dip to 0% in weeks when nothing was sent.
- More realistic simulations. Feedback you leave when you flag a round now shapes the next one, each simulated vendor is picked to fit the recipient’s role, and some advanced simulations reference a vendor’s real website, as real attacks often do.
- Company details first. AutoPhish asks for your company details, such as your industry and the vendors you use, before it turns on, so simulations match your business from the first round.
- No double testing. When you turn on AutoPhish, Cimento offers to stop any phishing campaigns that are still sending, so employees aren’t tested by both at once.
- Automatic exclusions are labeled. If an employee’s mailbox can’t be found two rounds in a row, AutoPhish stops sending to it and marks the person in Recipients as excluded automatically.
Fixes
- Search by full name. Searching for a full name like “Jane Smith” now finds the person on employee lists, course completion pages and exports. Before, only a first or last name on its own worked.
- Direct training assignments stay put. Employees you assign to a training campaign directly now stay enrolled if they later leave the campaign’s target group.
- More reliable AutoPhish rounds. Rounds for large organizations now generate in full, and a round that gets interrupted picks back up on its own. Enrolled employees are no longer skipped, people whose start date hasn’t arrived are left out, and special characters in subject lines display correctly.