Phishing simulation & security awareness training

Train your team to spot the attacks that get through

Pitchfork runs realistic, authorised phishing simulations against your own people, shows you exactly who's at risk, and turns every click into a moment of learning — safely, with nothing ever captured.

Most breaches start with a single click. Find and fix that risk before an attacker does.

Realistic simulations

80+ ready-made lures in the styles attackers really use — IT alerts, payroll notices, delivery updates, sign-in warnings — each rendered to look like the genuine article.

Point-and-click campaigns

Pick a scenario, choose who it goes to, schedule it, and send. Personalised per recipient. No security expertise required.

See who's at risk

Track opens, clicks and reports in real time, with a per-person risk view so you know exactly where to focus training.

Teachable moments

The instant someone falls for a test they get a short, friendly explainer of what they missed — learning, not blame.

How it works

From campaign to coaching in four steps

Choose a simulation

Start from a catalogue of realistic, ready-made lures.

Pick your audience

Target a person, a team, a department, or everyone.

Send

Pitchfork delivers personalised, realistic emails on your schedule.

Track & teach

Watch results live and coach anyone who slips, in the moment.

Responsible by design

Built for authorised testing — and nothing else

Pitchfork is a training tool for organisations to test and educate their own staff. It is designed, from the ground up, to teach safely and to never handle anything it shouldn't.

Talk to us

Simulations are only ever sent to your own employees, with your authorisation.
Passwords and submitted data are never stored — Pitchfork records that a form was submitted, never what was typed.
Every test ends in a short teaching moment, not a gotcha.
A full audit trail records what was sent, to whom, and when.