Phishing Simulations
Run realistic phishing and social engineering simulations with Herd to train your team, build awareness, and track resilience.
Overview of Simulations
You're ready to start running phishing simulations! Herd makes it simple to test and train your team against real-world social engineering threats, so you can build awareness without disrupting daily workflows. Whether you're simulating phishing emails, SMS messages, or even AI voice-cloning deepfakes, Herd ensures your team gains practical experience recognizing and responding to attacks.
Open Simulations in the left-hand sidebar to land on the email Campaigns list. The Simulations header at the top of the section switches channels with a pill selector: Email and SMS (channels your plan does not include are hidden or shown locked). The same header holds the Reviews and Reports buttons, the section's New action, and the settings gear, so they stay in one place as you move between tabs.
This section provides step-by-step instructions for building new simulations and how to use them effectively. You'll be able to plan, launch, and track simulations with ease, helping your team stay alert and resilient.
What You'll Find Here
Navigating the Phishing Simulations Page: find your way around the section header, the template library, and campaigns.
Whitelisting Email Domains (Google Workspace): allowlist Herd's sending domains in Google Workspace so simulations land in every user's inbox.
Whitelisting Email Domains (Microsoft 365): allowlist Herd's sending domains in Microsoft 365 with Defender Advanced Delivery.
Creating Email Templates: design realistic phishing email templates, organize them with tags and collections, and star your favorites.
Landing Pages: build the pages users see after they click, including credential-capture tracking.
Create Campaign: build a campaign from hand-picked templates, a collection, or a tag; set the audience and delivery; run it once or on an ongoing cadence.
QR Code Phishing: add scannable QR codes to templates to simulate "quishing" attacks.
Campaign Results: track per-person outcomes, understand how Herd filters out security-scanner traffic, and review program-wide reports.
Auto-generated Simulations: let Herd generate fresh templates nightly from your app stack and reported threats.
Email Simulations
Users receive a realistic phishing email designed to mimic common attack techniques.
If a user clicks on a suspicious link or fails to report the email, Herd provides real-time feedback and education.
Email simulations help strengthen awareness around links, attachments, and sender authenticity.
Last updated