Compare virtual CISO service models, costs and contract terms, then...
Read MoreOver 90% of breaches start with a phishing email. Kaseya BullPhish ID combines realistic, multi-vector phishing simulations with adaptive e-learning and per-user risk scoring to measurably change employee behaviour and turn every member of staff into an active line of defence.
Reduction in Click Rates
Simulation Templates
Languages Supported
Automated Scheduling
Four pillars of human risk reduction — test, train, measure, and reinforce
Launch fully automated, deeply realistic phishing campaigns across email, SMS, and voice channels with industry-specific templates that mirror real-world threats.
Engaging, gamified e-learning modules covering phishing, ransomware, password hygiene, social engineering, and compliance topics, auto-assigned based on risk profile.
Per-user and per-department risk scoring with trend analytics, executive dashboards, and audit-ready reporting for ISO 27001, SOC 2, and GDPR compliance.
Automated re-training for repeat clickers, adaptive campaign frequency, and ongoing reinforcement that builds lasting human firewalls, not one-off compliance ticks.
Six attack vectors that mirror the full spectrum of social engineering threats your staff face
20+ bite-sized, gamified e-learning modules auto-assigned based on each user risk profile
How to spot spoofed sender addresses, hover-link inspection, and the subtle tells of spear-phishing lures targeting executives and finance teams..
Passphrases vs passwords, password managers, MFA fatigue attacks, and why SMS-based MFA is no longer enough for privileged accounts.
How ransomware enters through phishing, the cost of an incident, and the critical role every employee plays in stopping the initial foothold..
Pretexting, tailgating, baiting, and impersonation tactics — both in-person and digital — that bypass technical controls entirely.
Shadow IT risks, OAuth consent phishing, document sharing hygiene, and how attackers abuse legitimate cloud features to move laterally..
Personal data handling, subject access requests, breach notification timelines, and the human element of GDPR compliance for UK organisations.
Home network security, public Wi-Fi risks, shoulder surfing, and device hygiene for staff working from home, co-working spaces, or while travelling.
Voice and SMS-based social engineering attacks, fake bank fraud calls, delivery scam texts, and how to verify identity safely..
Four phases of a Vonahi penetration test — following PTES methodology — click to view each
Launch fully automated, deeply realistic phishing campaigns across email, SMS, and voice channels with industry-specific templates that mirror real-world threats.
Engaging, gamified e-learning modules covering phishing, ransomware, password hygiene, social engineering, and compliance topics, auto-assigned based on risk profile.
Per-user and per-department risk scoring with trend analytics, executive dashboards, and audit-ready reporting for ISO 27001, SOC 2, and GDPR compliance.
Automated re-training for repeat clickers, adaptive campaign frequency, and ongoing reinforcement that builds lasting human firewalls, not one-off compliance ticks.
Three tiers — from baseline compliance to continuous, multi-vector testing with vCISO oversight
Ideal for: Organisations needing to meet baseline compliance requirements (Cyber Essentials, ISO 27001 awareness) with minimal overhead.
Ideal for: Organisations committed to measurable behavioural change with monthly cadence and full reporting visibility.
Ideal for: Financial services, healthcare, and regulated sectors requiring continuous, multi-vector testing with executive oversight.
A 5-step process from baseline assessment to continuous improvement
We run an initial phishing simulation and risk assessment to establish your organisation’s current click rate, reporting rate, and human risk score.
We design a tailored simulation and training schedule aligned to your industry, threat landscape, roles, and compliance requirements.
Automated, multi-vector phishing campaigns are scheduled and deployed. Clickers and reporters are identified in real time.
Monthly and quarterly reports show risk trends, click-rate reduction, and compliance evidence. We review and adjust the programme.
Test the security of a new infrastructure, application, or cloud deployment before it goes live — finding vulnerabilities before they are exposed to the internet.
Kaseya BullPhish ID is a phishing simulation and security awareness training platform that helps organisations reduce human cyber risk. It combines realistic, automated phishing campaigns with interactive e-learning modules and per-user risk scoring to measurably change employee behaviour over time.
Most organisations see a measurable reduction in click rates within the first 2 to 3 campaigns. With consistent monthly simulations and targeted re-training, click rates typically drop by 60 to 80% within the first 6 months of programme adoption.
Yes. Security awareness training is a requirement under UK GDPR Article 39 and Article 32. BullPhish ID provides audit-ready reporting that shows your organisation delivers regular, documented security awareness training to all staff with access to personal data.
BullPhish ID supports email phishing, spear phishing and business email compromise (BEC), SMS phishing (smishing), voice phishing (vishing), QR-code phishing (quishing), and physical media drops. This multi-vector approach reflects the full range of social engineering attacks seen in real breaches.
When an employee clicks a simulated phishing link, submits credentials to a fake portal, or fails to report a suspicious message, BullPhish ID automatically enrols them in a short, targeted training module relevant to the attack vector they fell for. No admin intervention is required, and completion is tracked for compliance.
Yes. You can create branded phishing templates that mirror your internal communications, supplier emails, or industry-specific lures. The Active Defence and Human Risk Management tiers include bespoke template creation as part of the managed service.
BullPhish ID integrates with Microsoft 365, Google Workspace, Kaseya VSA/RMM, Microsoft Entra ID (Azure AD), and SAML/SCIM-based single sign-on. This allows automatic user provisioning, group-based campaign targeting, and unified reporting across your environment.
Pricing is per user per month, starting from £2.50 for Awareness Foundation, £4.50 for Active Defence, and £7.50 for Human Risk Management. Volume discounts apply for organisations above 100 users, with additional sector discounts for charity, education, and NHS organisations. Contact Trustedia for a tailored quote and a free baseline phishing assessment.
We accept Visa, Mastercard, and American Express for card payments, BACS bank transfer for annual contracts, and official purchase orders from UK public sector, education, and enterprise organisations. Annual billing includes a 10% discount with locked pricing for the contract term.
The minimum engagement is 12 months, which allows sufficient time to establish a baseline, run multiple campaign cycles, and demonstrate measurable behavioural change. Multi-year contracts receive an additional 5% loyalty discount. We do not offer month-to-month billing.
BullPhish ID provides per-user and per-department risk scores, click-rate and reporting-rate trends, campaign-level results, and compliance evidence packs. Reports can be exported in PDF and CSV format and scheduled for automatic delivery to stakeholders.
Both options are available. Trustedia offers a fully managed service where we design, launch, and review all campaigns and training on your behalf, or a self-service option where your team administers the platform with our onboarding and best-practice guidance.
Compare virtual CISO service models, costs and contract terms, then...
Read More
Learn how to protect client data from breaches with seven...
Read More
Plan your iso 27001 implementation with clear steps on cost,...
Read MoreHave questions or need assistance? We’re here to help. Reach out to us anytime, and we’ll respond promptly to your inquiries.
+44 03303031444
