Social Engineering & Phishing
Authorised campaigns that measure how staff respond to realistic phishing emails, phone pretexts and MFA-fatigue lures — reported as awareness data, never to shame individuals.
Indicative starting price $2,700 · final price confirmed in your quote
What we test
- Phishing email campaigns
- Voice phishing (vishing)
- MFA-fatigue and credential lures
- Awareness reporting
What you get
- Campaign metrics
- Anonymised behaviour trends
- Training recommendations
- Optional repeat campaign
Supports audit evidence for
PIPEDA & Quebec Law 25
How testing maps to complianceHow the engagement runs
Scope and written authorisation first, then reconnaissance, testing, live escalation of critical issues, reporting and a free retest. Read the full methodology.