Phishing simulation
Test your teams before a real attacker does
Send realistic phishing simulations. Those who fall for them get an instant micro-lesson. Track progress by department and adjust scenarios.
Phishing by the numbers: what's at stake for an SMB
€130,000
average cost per incident
Ransom, business interruption, legal fees, regulator notification. The real cost of a cyberattack for an SMB under 250 employees.
Source: Hiscox Report, 2023
43%
of SMBs affected
of French SMBs experienced at least one cyberattack in 2025. One in two via phishing email.
Source: CESIN Barometer, 2025
86%
reduction
reduction in click rate after 12 months of regular simulations with point-of-error training.
Source: KnowBe4, 2025
Your teams get tested. Those who fall for it learn. You see everything.
Import your team
Copy-paste from your directory or connect Active Directory. One coffee and you're done.
Turn on autopilot
You configure once. nophi.sh sends the right campaigns to the right people, with gradual difficulty and randomized scenarios each time. Fake WeTransfer, fake supplier follow-up, fake CEO message.
Those who click get a micro-lesson
3 minutes, on the exact mistake they just made. You track progress by department in your dashboard.
What makes our simulations believable
Realistic, varied domains
Automatic rotation across multiple credible sending domains. Each campaign uses a different sender.
Templates based on real threats
Fake WeTransfer, fake DocuSign, fake management requests. Inspired by the campaigns ANSSI documents each quarter.
Staggered, smart delivery
Emails arrive at different times, across several days. Not 50 identical emails on Monday at 9am.
Per-department results
Accounting clicks more than marketing? You'll know. Risk score per team, 6-month trends.
Bonjour Julien,
La facture #F-2847 de TECH SOLUTIONS LTD necessite votre signature.
Ce document expire dans 24 heures.
Bonjour,
Les coordonnees bancaires pour les redevances ont ete mises a jour. Veuillez telecharger les nouvelles instructions.
https://secure-transfer-portal.com/wire
Merci de traiter avec discretion.
Bonjour,
Les coordonnees bancaires pour les redevances ont ete mises a jour. Veuillez telecharger les nouvelles instructions.
https://secure-transfer-portal.com/wire
Merci de traiter avec discretion.
Click rates drop. The numbers prove it.
30%
Average phishing email click rate, all industries
<5%
After a regular simulation program with point-of-error training
KnowBe4 Phishing By Industry Benchmarking Report 2025 - 67.7 million simulations
First campaign in 15 minutes
15 minutes to configure. First results the same day.
