Simulate phishing, QRishing, and smishing attacks to identify which employees represent a real risk.
Train teams with courses, learning paths, and awareness materials tailored to each organization.
Measure the organization's human risk level over time and track progress.
Make data-driven decisions: identify vulnerable users, high-exposure departments, and behavioral trends.
Whalemate is organized into six main areas:
Simulations Create and manage phishing, QRishing, and smishing campaigns. Define audiences, schedule sends, and analyze the results of each campaign.
Academy Assign courses and learning paths to employees. Includes an audit log to track the status, progress, and certifications of each person.
Awareness Access the Resource Gallery to explore, send, and download ready-to-use educational materials, or create custom content tailored to your organization.
Insights Visualize key metrics about employee behavior: human risk score, simulation analytics, campaign impact, and repeat offender trends.
SIEM Integrate Whalemate with your Security Information and Event Management (SIEM) system. Centralizes simulation and incident data into the monitoring tools your organization already uses.
Incident Reporting Allows employees to report suspicious emails or messages directly from their work environment. Centralizes reports so the security team can review and act on them.
Set up your organization: add employees and define departments, teams, and countries.
Launch your first simulation: choose a phishing template and send it to a test group.
Assign a training: link a course or learning path to employees who need reinforcement.
Review the results: go to Insights to understand your organization's current risk level.
If this is your first time on the platform, we recommend starting with Simulations to gather real behavioral data before designing your training plan.
Do I need technical knowledge to use Whalemate?
No. The platform is built for security, HR, or IT administrators without requiring advanced technical expertise.
Do employees know they're being simulated?
Not necessarily. Simulations are designed to replicate real attacks. If an employee falls for a simulation, they can automatically receive a reinforcement training.
Can I customize campaigns and materials?
Yes. Both simulation templates and awareness resources can be adapted to your organization's identity and context.
Have feedback or want to request improvements? Let us know at roadmap.whalemate.com/roadmap
