Tailored Phishing Simulations and Training is now generally available: Train employees on the attacks they face

Phishing attacks are often tailored to the organizations they target, but most simulations used to prepare employees are still generic. When an employee clicks, the feedback is often delayed and disconnected from the attack pattern and warning signs they missed. A better approach builds simulations from the attacks actively targeting your organization, trains on the signals employees actually miss, right when they miss them, and runs from the platform already protecting you.

Today, Tailored Phishing Simulations and Training is generally available.

"Long-form, generic security training has consistently struggled with uptake. We wanted something shorter and more immediate, delivered at the moment people need it, not another module they'll put off. Sublime's approach gives us that, and it suits how our colleagues engage with learning."
– Chris Payne, Group Head of Cyber & Infrastructure, Goodwood

Simulate the attacks targeting your organization

Sublime includes a curated template library, ranked for each organization based on the attacks seen in their environment. Two customers opening the same library see different recommendations, with the techniques most active and recently seen prioritized at the top.

When Sublime catches a real attack, you can convert the message into a ready-to-send simulation in minutes. Sublime defangs the message, removes any personal information, and preserves what made it a convincing attack.

For threats you anticipate but haven't seen yet, like a tax-season lure, choose an attack type, scenario, and difficulty, and Sublime will generate the template. You can save anything you create to your library for reuse.

Train employees at the moment they click

Turn on training for a campaign, and it starts as soon as an employee clicks a simulated link. The employee sees the email they just clicked with its red flags highlighted, plus an optional note from your team (how to report phishing, or a link to your policy) and a knowledge check. The entire experience takes about two minutes, and every completion is recorded with a timestamp.

Red flags are generated for each template, so someone who clicks a fake vendor invoice learns exactly which warning signs gave it away. Admins can preview and validate the training alongside the email before a campaign goes out.

Test your greatest areas of exposure and measure progress

Sublime shows how common each real attack type is in your environment. If credential phishing makes up a third of your real attacks, you see how employees hold up against it, and which attack types you haven't tested at all.

Measure the success of your program with click, report, and training completion rates for each campaign and over time. Identify individuals who click repeatedly, your most vulnerable groups, and where employees struggle most.

Built into the platform that protects your inbox

Simulations land in Microsoft 365 and Google Workspace inboxes through the API connection Sublime already has, so there's nothing new to allowlist and no separate console to manage. With RBAC support, a dedicated Simulation Manager role lets program owners work without full administrative privileges, and every campaign action is recorded in the audit log.

Sublime labels its own simulations and excludes them from detection and triage, so tests your users report never land in the analyst queue.

Campaigns can include multiple templates, assign them at random, and stagger delivery across a time window you set, so the first "Don't click that!" message in the team chat doesn't spoil the test.

Get started

Tailored Phishing Simulations and Training is available now as an add-on to Sublime Email Security for Microsoft 365 and Google Workspace.

• Already a Sublime customer? Contact your account team for a demo of Tailored Phishing Simulations and Training.
• In the beta? GA features roll out to you automatically, and your account team will follow up on next steps.
• Want more details? See the Tailored Phishing Simulations and Training page.
• Not a customer yet? Get a demo and watch Sublime turn a real attack into a simulation.