Skip to main content
Cimento phishing simulations test how employees respond to realistic social-engineering attempts and route the result into training. Simulations can arrive by email, SMS, voice call, or as a multi-channel scenario that chains them.

​
What you configure

​
Channels

  • Email is placed directly in each employee’s inbox through the Gmail API for Google Workspace, or Microsoft Graph for Microsoft 365. Nothing crosses your mail gateway, and the message renders exactly as a real attack would.
  • SMS and voice simulations go to phone numbers you enroll. Cimento operates the sending numbers; you do not need a carrier or telephony account.
  • Multi-channel scenarios combine the above, for example an SMS that sets up a follow-up call.

​
Setup at a glance

1

Connect email delivery

Follow the Google Workspace or Microsoft 365 guide.
2

Enroll phone numbers (optional)

Enroll employees whose phone numbers come from your directory, to enable SMS and voice channels. See SMS and voice.
3

Set up reporting (optional)

For Outlook, deploy the Phish Alert Button so employees can report suspicious email to your security team.
4

Run a pilot campaign

Pick a gallery template, target one small group of employees, and review results before widening. See Campaigns.