Security Awareness Training That Actually Works

An admin creates an organization, invites employees by email or bulk CSV, and manages everything from a centralized dashboard. Employees receive simulations on their own cadence; the admin sees aggregate analytics, department breakdowns, training progress, and audit-ready reports across the entire team.

Yes — a one-time setup so simulated phishing lands in inboxes the way real phishing would, instead of getting flagged by your gateway. Our guided Email Delivery wizard walks your IT admin through a few clicks in Microsoft 365, Google Workspace, or your provider of choice. No DNS changes required to get started.

Yes, optionally. By default, simulations come from third-party lookalike domains we own — DHL-style shipping notices, DocuSign-style signature requests, and so on — which mirror real external phishing. For higher-realism internal pretexts (CEO BEC, IT helpdesk, payroll), your admin can pre-approve your own domain in the Email Delivery wizard, and those campaigns will land with your real domain in the From: header. Both modes use an explicit consent click and a full audit log of which sender domains you've authorized.

Realistic enough that click rates on first-month simulations typically match what attackers see in the wild — that's the point. Templates cover the highest-volume real-world pretexts (shipping notifications, document-share requests, Microsoft 365 admin alerts, voicemail notifications, invoice fraud, IT helpdesk tickets, payroll updates, CEO wire-transfer requests). Each simulation pairs a brand-correct visual layout with a sender domain that matches the pretext, and the educational debrief shown after a click teaches the specific red flags that template exercised.

Yes. Organize employees into departments and run targeted training campaigns that send specific simulation templates on a schedule. For example, you can run BEC pretexts for Finance, credential-harvesting campaigns for Engineering, and HR-themed lures for everyone during open enrollment.

Forward any suspicious email to check@scamdrill.com and receive an instant AI-powered analysis: sender authentication, content-pattern review, and link inspection — returning a risk score, red flags, and recommended actions within seconds. Included with Business and Enterprise organization plans.

Every org plan — Starter, Team, Business, and Enterprise — includes audit-ready reports with employee-level detail: simulation delivery records, click and report rates, risk scores, and annual web-based-training completion. Reports export to CSV for SOC 2, ISO 27001, HIPAA, PCI-DSS, and other frameworks. Custom date ranges are supported, and Enterprise+ customers can pull the same data via the REST API.

The Enterprise plan includes a REST API plus webhook events for real-time campaign activity (sent, opened, clicked, reported). SAML SSO and SCIM directory sync via WorkOS are available as an add-on — works with Okta, Entra ID (Azure AD), Google Workspace, OneLogin, JumpCloud, and any SAML 2.0 IdP, so deprovisioning a user from your IdP automatically deactivates them in ScamDrill.

Yes, on the Enterprise plan. Customize primary and secondary colors, sender display names, and email footers across all training and notification mail. Full white-label mode removes ScamDrill branding entirely so simulations and report emails appear as internal training from your security team.