Simulate phishing, QRishing, and smishing attacks to identify which employees represent a real risk.
Train teams with courses, learning paths, and awareness resources tailored to each organization.
Measure the organization's human risk level over time and track progress.
Make data-driven decisions: identify vulnerable users, departments with greater exposure, and behavioral trends.
Whalemate is organized into six main areas:
Simulations Create and manage phishing, QRishing, and smishing campaigns. Allows you to define audiences, schedule sends, and analyze the results of each campaign.
Academy Assign courses and learning paths to your employees. Includes an audit log to track the status, progress, and certifications of each person.
Awareness Access the Resource Gallery to explore, send, and download ready-to-use educational materials, or create your own content tailored to your organization.
Insights View key metrics about your employees' behavior: human risk score, simulation analytics, campaign impact, and repeat-offender trends.
SIEM Integrate Whalemate with your security information and event management (SIEM) system. Allows you to centralize simulation and incident data in the monitoring tools your organization already uses.
Incident Reporting Allows employees to report suspicious emails or messages directly from their work environment. Centralizes reports so the security team can review them and take action.
Set up your organization: add employees, define departments, teams, and countries.
Launch your first simulation: choose a phishing template and send it to a test group.
Assign training: link a course or learning path to employees who need reinforcement.
Review the results: access Insights to understand your organization's current risk level.
If this is your first time on the platform, we recommend starting with Simulations to obtain real behavioral data before designing your training plan.
No. The platform is designed for security, HR, or IT administrators without the need for advanced knowledge.
Not necessarily. Simulations are designed to replicate real attacks. If an employee falls for a simulation, they can automatically receive reinforcement training.
Yes. Both the simulation templates and the awareness resources can be adapted to your organization's identity and context.
Do you have feedback or want to request improvements? Let us know at roadmap.whalemate.com/roadmap
