White label phishing simulation for partners:
You offer it, we run it in your name
A white label phishing simulation means that you offer your customers a managed phishing simulation service, with a phishing exercise for employees, reports and awareness training, in your company's name, and we run it behind the scenes. There is no platform to manage and no team to set up.
Do you manage many customers and want a managed solution without dedicating a team or running a dashboard? You give the instruction, we deliver.
A phishing simulation for your customers, as a managed service
A managed phishing simulation service: no dashboard to run and no team to dedicate.
Phishing simulations in your company's name (by arrangement)
You keep the relationship with the customer, and we run it behind the scenes. The scope of branding in emails and landing pages is agreed in advance.
A phishing exercise for employees, from a scenario library
A simulation with scenarios and landing pages in Hebrew and English, and targeting of employee groups by arrangement, for each customer separately.
Customer reports, with your logo (by arrangement)
A summary management report that can be presented at a management meeting and attached to an audit. Report branding is agreed in advance with each partner.
Awareness training to raise employee awareness
Awareness training for the customer's employees by a CISO in your name, in person or remote (Zoom/Teams/Google Meet), by quote.
What your customer gets: a simulation, a report and awareness training
| Area | Who is responsible |
|---|---|
| The agreement and the relationship with the customer | You |
| Running the campaigns | PhishingU, in your name (the scope of branding is agreed) |
| The report for the customer | PhishingU, in your name (branding is agreed) |
| The awareness training | A CISO on our behalf, in your name (by quote) |
Easy for partners: you give the instruction, we deliver
- 1. You give us the instruction: the customer, the scenario and the employee groups.
- 2. We implement and run it in your name. There is no system to learn and no dashboard to manage.
- 3. You receive a report ready to pass on to the customer (the scope of branding is agreed).
Who is the service for? Anyone who supports several customers
- Penetration testing companies
- MSPs and MSSPs
- CISO as a service (vCISO)
- ISO 27001 and Amendment 13 consultants
- IT providers and integrators
- Information security managers who support several customers
When it helps: after a penetration test or a survey, as partial evidence before an ISO 27001 audit, and in a management meeting.
A simulation that ends in training, not only in a report
A phishing simulation shows how employees actually respond, and awareness training teaches them what to do differently. The two stages together, repeated throughout the year, turn a one-time exercise into an awareness program that can be reported to management.
Awareness training remotely (Zoom/Teams/Google Meet) or in person
Alongside the simulation, you can offer customers awareness training for employees by a CISO, in your company's name, in a format that suits them. Pricing is by quote.
Evidence of awareness training that supports part of the requirements of Amendment 13, ISO 27001 and SOC 2
The report and the certificate are evidence of awareness training that supports part of the requirements of Amendment 13, ISO 27001 and SOC 2. They are not a confirmation of full compliance with a law or a standard.
Frequently asked questions
What is a white label phishing simulation?
White label means that you offer your customers a phishing simulation and awareness training service in your company's name (the scope of branding is agreed), and we run it behind the scenes. There is no platform for you to manage and no team for you to set up.
Do we need to dedicate a team or run a dashboard?
No. You do not operate a system. We run it in your name and deliver a report. On the customer side one IT action is required (allowlisting), and launch is subject to a security review of up to one business day.
How much work does it require from the partner?
Very little. You pass us an instruction: which customer, which scenario and which employee groups, and we implement it and deliver a report. On the customer side a written approval and one IT action (allowlisting) are required, and launch is subject to a security review of up to one business day.
Will our report or logo appear?
Reports with your logo are possible by prior arrangement. Branding of the simulation emails and landing pages is checked for each customer and scenario, and is not guaranteed in every detail. The wording of the certificate remains as it is and is not edited.
Can we manage many customers, each separately?
Yes. Each customer has separate simulations, and you can target by departments and employee groups.
What is the difference between a phishing test and a penetration test?
A phishing test checks how employees respond to a suspicious message, using a simulation or phishing exercise. A penetration test checks technical weaknesses in systems. They complement each other, and partners who carry out penetration tests can add a phishing test for employees for their customers.
How does a phishing exercise raise awareness in the organization?
A phishing exercise shows how employees actually respond, and awareness training teaches them what to do differently. Repeating the process lets you follow a trend over time. A simulation does not guarantee the prevention of attacks, and it complements technical controls.
Do the report or certificate prove compliance with Amendment 13, ISO 27001 or SOC 2?
No. They are evidence of awareness training that supports part of the requirements of Amendment 13, ISO 27001 and SOC 2. The decision remains with the auditor or the legal advisor, and this is not a confirmation of full compliance with a law or a standard.
What is required from my customer?
A written approval from the organization to run the simulation, and one IT action (allowlisting) that is coordinated in advance. Launch is subject to a security review of up to one business day.
How is pricing set for partners?
Pricing and terms are set in a conversation, by scope. There is no public price list for partners.