Skip to main content
The AutoPhish page has two views: Schedule for rounds that are about to send, and Results for what happened. Switch between them at the top right.

​
Review upcoming rounds

Schedule lists the next round, then the rounds already sent. A round opens two business days before its first send, which is your window to review it.
The Schedule view with tiles for scheduled, next send, flagged and reported, an upcoming round on Nov 9 and a list of recently sent rounds

Schedule › flag or skip the next round

Click a round to open it. Emails are grouped by department. Search by name, email, department or subject, then click a person to see the exact email they will get.
An open round grouped by department, with the Finance department expanded to show each person's subject line, sender and send date

Open a round, pick a department, then a person to see their email

From a round you can:
  • Flag it. Click the thumbs-down icon and say why it isn’t a fit, for example “we don’t use this vendor” or “too aggressive for our finance team”. Future rounds read your feedback and steer away from it. You can also flag a single person’s email.
  • Stop one email. Open the person’s email and choose not to send it. Their email is cancelled.
  • Skip the round. Click the trash icon. None of the round’s emails are sent. You can skip a round until all of its emails have gone out.
Cancelling an email and skipping a round can’t be undone. Rounds marked New joiners test people seven days after they join. Review them the same way. A round’s Not sent section lists anyone who won’t get an email, with the reason. AutoPhish checks every email before it’s scheduled and drops ones it can’t get right. People who miss a round are picked first in the next one.

​
Read results

Results shows how the company is doing over the period you pick: 7 days, 30 days, 90 days, 12 months or Custom. Click Export to download the results as CSV.
The Results view with failure rate, reported to security, delivered and reach tiles above a 12-month failure and reported rate chart

Results › pick a period, or Export

The status next to Running reads Improving, Steady or Needs review, based on the trend. Click an event in Recent activity to see the email that person received, with the link they clicked highlighted, and their record across the program.
A person's result panel showing the email they received with the clicked link highlighted, and a track record of 19 of 26 simulations handled safely

Recent activity › click an event

​
What employees see

The email arrives in the employee’s inbox like any other message. If they report it with the Phish Alert Button, it counts as Reported.

​
Training after a click

Anyone who clicks the link goes straight to a short training page. There is nothing to sign in to and nothing to set up. The page works on desktop and phone.
1

They see it was a practice email

The page says it was a practice phishing email and shows the exact email they clicked, blurred. The first red flag is lifted out with a short explanation.
A page titled That was a practice phishing email, with the sender address highlighted and a card explaining it is a spoofed sender

The first red flag; Next moves to the next one

2

They step through each red flag

Next moves to the next red flag, such as fabricated urgency, a link that goes somewhere other than it says, or an unexpected brand. The red flags are written for each email, so they point at real text in the message.
The training page with four red flags called out: spoofed sender, fabricated urgency, hidden destination and unexpected brand

After the last red flag, click What to do next

3

They read what to do next time

What to do next time shows the full email and three habits: read the sender’s address, check unusual or urgent requests another way, and use the report button.
The full email next to a card listing three things to do next time, with a Got it button

Got it ends the training

4

They finish

Got it ends the training. In Recent activity their result shows Went through the red flags.
The training page showing All done next to the full email

All done