Getting Started with PhishGrid
PhishGrid lets you run realistic phishing simulations, measure who's vulnerable, and turn results into training. This guide takes you from first login to your first campaign and its results.
Before you start
- Admin access to PhishGrid.
- A small test group (5–10 people) for a delivery test.
- Access to your mail administrator — you'll whitelist PhishGrid so simulations reach inboxes.
1. Whitelist PhishGrid (do this first)
Simulation email looks like phishing, so your mail security will block it unless you allow it. Start with the Whitelisting Guide and your account's Sending Domains & IPs. Skipping this is the #1 cause of failed campaigns.
2. Add your targets
Add the people you want to test — individually (Adding a Single Target) or in bulk (Import Users via XLSX, Synchronizing Targets via XLSX) — and organise them into groups.
3. Choose or build a template
Pick the lure. PhishGrid supports email phishing, SMS (smishing), and vishing. Browse Viewing & Managing Templates or build your own: phishing, SMS, vishing.
4. Launch a campaign
Create your first campaign — pick the target group, template, and schedule. Follow Create Your First Campaign. For richer scenarios see Multistage Attack Creation and Spear Phishing & Advanced Scenarios.
5. Run a delivery test
Before going org-wide, send to your 5–10 user test group and confirm mail lands in the inbox and clicks record. If anything's off, see Common Problems During Campaigns.
6. Read the results
Follow opens, clicks, and reports, then dig into Interpreting Your Results, Filtering and Downloading Campaign Reports, and Reporting to Management. New to the metrics? See the Metrics & KPI Glossary.
Then: close the loop with training
Turn risky clicks into learning — assign Awareness Content.