As phishing is an attack delivery method and your employees could be the weakest link in activating that delivery method, deploying, perhaps ransomware you can test your users to see if they can recognise a targeted (Spear) phishing email. depending on the scope of the test, you can just test your users a (white box) test where you provide us with a lot of detail then we deploy the test. Or you could perform the most rigorous test a (black box) test where you provide us just the company name (very little information) and we would test what an attacker would have to do to fingerprint (analyse attack pathways) your organisation. A full report with method and mitigations would be provided. See below for our brief service description. Phishing Simulation Service