Phishing Simulation

Viewing & Managing Templates

Viewing & Managing Templates

Overview

The Templates section is your library of phishing scenarios. Every campaign you run starts with a template. This page explains how to navigate the library, understand template quality signals, and manage your collection over time.


The template list

Go to Templates in the left sidebar to see all available templates — both system-provided and ones your organisation has created.

Each template in the list shows:

  • Name — what you called it
  • Type — Email, Vishing, or SMS
  • Tags — categories you've assigned for filtering
  • Susceptibility indicator — Low / Medium / High, based on historical click rates across campaigns using this template

Understanding susceptibility

The susceptibility indicator tells you how effective a template has been at catching users:

Indicator Meaning Use when
Low Most users recognise and ignore it Early-stage programmes, new users
Medium About half of users fall for it Intermediate testing
High Most users click it Advanced testing, experienced teams

Start with Low susceptibility templates for new programmes. Progress to High as your team's awareness improves. Don't test experienced users with easy templates — they'll score well but learn nothing new.


Template actions

Icon Action Notes
👁 View Preview the template See exactly what your targets will receive
✏️ Edit Modify the template Opens the full editor with pre-filled fields
📋 Duplicate Create a copy Prompts for a new name — useful for variations
🗑 Delete Remove permanently Cannot be undone; removes from all future use

Previewing before use

Always preview a template before adding it to a campaign. Check:

  • Does the sender name and email look convincing for your scenario?
  • Is the subject line appropriate for your target group?
  • Does the awareness content (what users see after clicking) make sense?
  • Is the difficulty appropriate for the group you're targeting?

Organising your library

As your library grows, use tags to keep it organised. Suggested tags:

  • By attack type: credential-harvest, invoice-fraud, it-support, executive-impersonation
  • By difficulty: beginner, intermediate, advanced
  • By channel: email, vishing, sms
  • By department target: finance, hr, it

When to duplicate vs edit

Duplicate when you want to create a variation of an existing template while keeping the original intact — for example, adapting a generic credential harvest for a specific department.

Edit when you want to update the template itself — changing a URL, updating the sender domain, or improving the copy.