Security Awareness Training
Security Awareness Training
Security Awareness Training is an add-on for Paubox Email Suite that lets you run phishing simulation campaigns against your own employees and see who needs more training. It runs from the same Paubox dashboard you already use for email security, so there's no separate platform to manage.
How Security Awareness Training works
Each campaign sends a simulated phishing email to some or all of your employees, then tracks who opened it, who clicked it, and who entered information on the fake sign-in page. Nothing an employee types into a simulated sign-in page is ever stored or logged, only which fields they filled in.
Anyone who clicks a link or enters information shows up in the Offenders table, so you can see at a glance who needs more training.
What's included
- Six built-in phishing scenarios: Microsoft login reset, DocuSign notification, Fax received, Secure message notification, HR benefits update and Package delivery. You can also generate an AI variation of any of them.
- Campaigns that send immediately, or at random times over a week so coworkers are less likely to warn each other
- Automatic campaigns that run for you each month, with no more than one automatic simulation per mailbox per month
- Results for each campaign showing who it was sent to, who opened it and who clicked
- An Offenders table listing everyone who clicked or entered information, with how many links each person clicked
- A one-click CSV report for each campaign, for compliance audits or board reports
Mailbox Access is required
Simulated phishing emails are built to look suspicious, so your email provider's spam filter may catch them. Connect Mailbox Access (Google Workspace or Microsoft 365) so Paubox can place each simulation directly in your employees' inboxes. Without it, simulations are delivered as ordinary email and may never be seen. You'll find Mailbox Access under Settings > Account.
Where the employee list comes from
There's no roster to upload or maintain.
- With Mailbox Access connected, the list is the active users in your Google Workspace or Microsoft 365 directory, and it updates automatically.
- Without Mailbox Access, the list is the senders on the Encrypted tab of Outbound Security > Senders.
Getting started
Security Awareness Training is available as an add-on to Paubox Email Suite Plus and above for an additional cost. If you'd like to add it, contact us. Once it's turned on, connect Mailbox Access, then go to Paubox Email Suite > Security Awareness Training. For step-by-step help, see Getting started with Security Awareness Training: connect Mailbox Access first.