Skip to content

Phishing simulation

Test your teams before a real attacker does

Send realistic phishing simulations. Those who fall for them get an instant micro-lesson. Track progress by department and adjust scenarios.

Phishing simulation illustration
The cost of a click

Phishing by the numbers: what's at stake for an SMB

€130,000

average cost per incident

Ransom, business interruption, legal fees, regulator notification. The real cost of a cyberattack for an SMB under 250 employees.

Source: Hiscox Report, 2023

43%

of SMBs affected

of French SMBs experienced at least one cyberattack in 2025. One in two via phishing email.

Source: CESIN Barometer, 2025

86%

reduction

reduction in click rate after 12 months of regular simulations with point-of-error training.

Source: KnowBe4, 2025

How it works

Your teams get tested. Those who fall for it learn. You see everything.

01
Step: Import your team
01

Import your team

Copy-paste from your directory or connect Active Directory. One coffee and you're done.

02
Step: Turn on autopilot
02

Turn on autopilot

You configure once. nophi.sh sends the right campaigns to the right people, with gradual difficulty and randomized scenarios each time. Fake WeTransfer, fake supplier follow-up, fake CEO message.

03
Step: Those who click get a micro-lesson
03

Those who click get a micro-lesson

3 minutes, on the exact mistake they just made. You track progress by department in your dashboard.

What makes our simulations realistic

What makes our simulations believable

Realistic, varied domains

Automatic rotation across multiple credible sending domains. Each campaign uses a different sender.

Templates based on real threats

Fake WeTransfer, fake DocuSign, fake management requests. Inspired by the campaigns ANSSI documents each quarter.

Staggered, smart delivery

Emails arrive at different times, across several days. Not 50 identical emails on Monday at 9am.

Per-department results

Accounting clicks more than marketing? You'll know. Risk score per team, 6-month trends.

Phishing simulation demo
Measured results

Click rates drop. The numbers prove it.

Before

30%

Average phishing email click rate, all industries

After 6 months

<5%

After a regular simulation program with point-of-error training

-86%

KnowBe4 Phishing By Industry Benchmarking Report 2025 - 67.7 million simulations

First campaign in 15 minutes

15 minutes to configure. First results the same day.

Hosted in France
GDPR compliant
French-speaking support