[Start] Phishing simulations in Guardey: overview

Phishing simulations in Guardey

Phishing simulations help your organization train users to recognize suspicious emails. Guardey lets you send simulated phishing emails and track how users respond.

Use this page to choose the right campaign type and move to the correct setup guide.

Campaign types in Guardey

One-time phishing campaign

You send one phishing email to each selected user. Guardey sends the emails at the campaign start time.

Use this for:

• a baseline test
• a targeted one-off test (for example, after an incident)

Randomized phishing campaign

You schedule a sending window. Guardey sends emails to users at random moments within that window. This reduces predictability and limits “word-of-mouth” warnings.

Use this for:

• ongoing testing over days or weeks
• larger groups where you want a natural spread

Language handling: Guardey uses the user’s language where available. If the template is not available in that language, Guardey sends the English version.

Custom spear phishing simulation request

You request a custom spear phishing simulation from Guardey. This is typically used for high-impact, realistic scenarios.

Use this for:

• management-focused tests
• organization-specific scenarios

How phishing simulations work

1. You create a campaign in the admin portal.
2. You select users or groups.
3. You choose one or more templates.
4. Guardey sends the emails (all at once or randomized, depending on the campaign type).
5. Guardey tracks user actions, such as opens, clicks, and reports.
6. You review results in the reporting dashboard.

Before you start

Make sure these items are in place before you launch your first campaign:

• You have access to the admin portal.
• Your users exist in Guardey, or you can import them.
• You have set up whitelisting for your mail platform.

ℹ️ If you do not whitelist first, emails may land in quarantine or be scanned. This can affect reporting accuracy.

Where to see results

You can review phishing results in the admin portal wihtin the campaign you have set up on the “Phishing page”. Guardey shows key metrics such as delivery and user interactions.

For definitions and reporting details, see [Reporting] Phishing reporting explained: email sent, opened, link clicked, submitted data

Next steps

• [Start] Checklist: before your first phishing simulation
• [Campaign] Set up a one-time phishing campaign
• [Campaign] Set up a randomized phishing campaigns

• [Deliverability] Whitelisting overview: what to whitelist for email delivery