Running phishing campaigns in the internal mailbox

Phishing campaigns resolve eligible employees, deliver messages into the internal simulation mailbox, and track actions such as open, delete, report, reply, link click, and attachment interaction. This design preserves safe training conditions by avoiding live phishing infrastructure in the default workflow.

Use campaign analytics to identify reporting rates, missed red flags, and retraining needs.