Skip to content
Simulation

Practice on the attacks people actually get.

An outdated template library trains people for last year's phishing. Cyberdise builds exercises from the tactics attackers are using now, across email and SMS, in the languages your people work in.

~60%
better risk behavior after AI spearphishing exercises
AISP study, IFZ Lucerne and Cyberdise AG, N = 539
AI spearphishing
personalized, at scale
Website cloner
realistic landing pages
Multilingual library
AI translation built in
A warehouse team lead in a high visibility vest, reading a message on his phone

The email at the desk, the text on the way home.

Attackers reach people wherever they happen to be looking, so your exercises should too. Cyberdise runs email and SMS from one place rather than from four tools that don't talk to each other. Texts go out from your own sender number, and in Microsoft 365 the email can land straight in the inbox.

  • Email and SMS lures, QR codes included
  • Data entry, hyperlink and file scenarios, with file links aimed where you choose
  • Double barrel and multi attack campaigns
  • Website cloner, landing pages and custom error pages
  • Custom, gender and AI variables

Compare what each product includes

A field sales representative beside her car reading two messages that arrived a minute apart, a colleague lifting equipment out of the boot behind her
The evidence

Exposure changes behavior. Training changes attitude. You need both.

~60%less risky clicking after AI spearphishing exercises, against baseline
8.9%visited the malicious site after AI spearphishing exposure, down from 22.6% at baseline
539participants in four randomized cohorts, November 2024 to June 2025

Source: AISP study

AI assisted

Realistic without the manual week.

Phishing Exercise AI AssistantGenerates the message and a first version of the landing page from your brief.
Spearphishing simulationPersonalized exercises by email or SMS, built from authorized OSINT, the intervention the AISP study found most effective.
Unique per recipientOne template is the base, and AI writes a separate message for every person in the campaign.
Personalized

One template, a message for every recipient.

The Generate Messages dialog, listing the per user variables and the instruction that individualizes one template
One template is the basis. Every recipient in the campaign gets their own message, generated automatically.
A reported real phishing email is sanitized, its links made safe, and sent to everyone as a simulation exercise while the threat is still circulating.

A real attack, turned into everyone's exercise.

When someone reports a genuine phish, it does not have to end as an incident ticket. Cyberdise turns the reported message into a sanitized exercise for the wider organization, while the threat is still circulating. The person who reported it gave the whole company its next lesson.

How reporting feeds this

The rest of the platform

Spotting the exercise is the start. Reporting it is the point.

Report-a-Phish ButtonReporting in one click from Outlook, Exchange or Gmail.Report-a-Phish Button
Behavioral risk scoringScores built from what people do, updated continuously.Behavioral risk scoring
Vishing and deepfakeVoice exercises, including cloned voices, with consent tracked per campaign.Vishing and deepfake
Will the exercises get past our spam and phishing filters?
Yes. You allowlist the exercises for exactly this sender and this campaign, nothing broader, and Cyberdise supports Microsoft Defender's route for third party simulations. The step by step guide for every layer is in the Knowledge Base.
Is there a way past the mail filters in Microsoft 365?
Yes. Direct Message Injection places the exercise straight into Microsoft 365 inboxes, so spam filters and transport rules never touch it. You choose it per module, and one campaign can mix it with regular delivery.
How do SMS exercises work?
An SMS exercise is built like an email one, with its own message and landing page, and sent from your own sender number. QR code scenarios and personalized messages built from OSINT research work by SMS too.
Can we run exercises without naming individuals?
Yes. Switch on Anonymous Mode when you create the campaign and choose which fields to hide. What that means for individual results, and for a works council, is on the scoring page.
Which languages can an exercise run in?
A template keeps all its language versions together. To add one, the AI Template Translator translates the message, landing page and lure into any language set up for your realm, and you review the result before it goes out. The building tools are covered on the AI Campaign Automator page.
Can we reuse a template in another realm or installation?
Yes. Export it and you get the whole bundle, every language version included, ready to import into another realm or installation.

Bring a scenario. We build the exercise live on the call.

Bring a real phish your people received and see it become an exercise, with training attached.