AI-generated phishing simulation
AI phishing simulations, personalised to every employee
SecurityRing recommends attacks from your industry, your tools and current advisories, and the AI Builder drafts the whole simulation from a one-line brief: email, landing page, training video and quiz. You review and approve every piece. After a one-time setup, a GRC team launches it in minutes, without a security engineer.
Templates / AI BuilderA brief. A finished email.
Write a payroll-update email for Finance. Use urgency and a sign-in request.
Action needed: confirm your payroll details
PEOPLE OPERATIONSLet’s keep your next payday on track.
Hello team,
We’re updating payroll records for this month.
Please confirm your details before 5 pm today
to avoid a delay in your next payment.
Confirm payroll detailsThank you,
People team
What the AI uses
Context from your company, not a generic template
- Org Profile: industry, sub-industry, country, regulatory regimes, prior phishing training and employee count
- Tech Stack: identity provider, email provider, HRMS and workplace tools, so a lure can look like a notice from a tool your people actually use
- Trending attacks from public sources such as CERT-In and CISA, plus company and industry news, regulatory updates and local events
- Popular: anonymised, aggregated patterns that caught out employees at other SecurityRing customers, including peers in your industry
RecommendationsYour next 3 simulations.
AI Builder
From a one-line brief to a reviewed campaign
Describe the scenario
“Describe a phishing scenario — the assistant will draft the brief first.” Or pick a recommendation and choose “Build this idea”.
Review each tab
Brief, Email, Landing, Quiz and Video, each edited inline and approved before you finalise. The red flags you mark become the lesson’s teaching points (“Detection cues”).
Personalise every email
Placeholders fill in each employee’s first name, manager, department and location, so no two people get exactly the same message.
Test, then launch
Send yourself a test, set the difficulty and campaign window (1 day to 8 weeks), and activate.
Launch in minutes
No security engineer needed
Choose people
Everyone, chosen departments or named people from your roster.
Pick a recommended attack
Choose an idea recommended for your industry, tools and news, then click “Build this idea”.
Approve what AI built
The AI Builder drafts the email, landing page, lesson and quiz. Edit anything, then approve.
Schedule and launch
Optionally send yourself a test, set the delivery window and pace, and activate.
One-time setup: import your roster and have your email admin allowlist SecurityRing’s sender details (a ready-made request is in the app).
- EmailLive
- Deepfake video in emailLive
- WhatsAppPrivate beta
- LinkedInComing soon
- Voice callsComing soon
Simulation channels as of October 2026. Deepfake video is enabled per workspace. WhatsApp is a private beta and not generally available yet.
In-the-moment training
The AI also writes the lesson
The training video is generated from the finished email: it shows the message the employee received, with a callout for each red flag, and the quiz is grounded in that message. Anyone who clicks sees it straight away, on a page marked “Required · Less than 2 minutes”.
What makes an AI phishing simulation different from a template library?
A template is the same email for everyone. SecurityRing starts from your organisation profile (industry, sub-industry, country, regulators, employee count), your tech stack (identity provider, email provider, HRMS and workplace tools) and current public advisories, recommends attacks that fit, and the AI Builder drafts the brief, email, landing page, training video and quiz for the one you choose. Each email is personalised per employee with their name, department, manager and location.
Does the AI send anything without our approval?
No. Every asset the AI Builder drafts (brief, email, landing page, quiz and video) is reviewed and approved before you finalise the campaign, under the approval policy in Settings. You can send yourself a test before anything goes to employees, and nothing launches until you activate the campaign.
Where do the recommended attacks come from?
From recommendation lanes such as Trending attacks (new scams flagged in public sources such as CERT-In and CISA), Your tools, Company news, Industry news, Regulatory updates, Local events and holidays, Departments and Popular. Popular shows anonymised, aggregated patterns that caught out employees in other SecurityRing customers’ campaigns over the last 90 days: no company names or email copy are shared.
Do we need a security engineer to run AI-generated phishing simulations?
No. After a one-time setup, in which your email admin allowlists SecurityRing’s sending domains, a GRC or security admin can choose people, pick a recommendation (“Build this idea”), approve what the AI Builder drafted and schedule the campaign in minutes.
Which attack types can the AI Builder create?
Email simulations with credential harvesting, link click, attachment, data entry, QR-code and ClickFix (a safe browser simulation) techniques are live, and deepfake video of a consenting leader inside email where your workspace has it enabled. WhatsApp is in private beta. LinkedIn, voice-call and SMS simulations are coming soon.
See the AI Builder draft a simulation for your company
In a short demo, we’ll pick a recommendation for your industry and build it end to end.