Social engineering and simulated phishing campaigns
Most attacks start with an email or a call. We measure how your teams react, without shaming anyone, then train them.
- 15+ years’ experience
- Across Quebec
- Free quote
- Bilingual service
Social engineering and simulated phishing campaigns
A simulated phishing campaign shows how many employees click, enter credentials or report the message. On request, we also test phone pretexting (fake IT support, fake wire request) and physical access by pretext. Results are reported in aggregate; the goal is better reflexes, not punishment.
What we install
- Realistic phishing scenarios tailored to your industry
- Decoy capture page (no passwords kept)
- Metrics: opens, clicks, submissions, reports
- Voice phishing and CEO fraud (on request)
- Physical pretext access test (on request)
- Short training after the campaign
- Aggregate report and recommendations
- Follow-up campaigns to measure progress
How a project runs
- Objectives and rules with management
- Scenario and list preparation
- Campaign
- Training and report
- Follow-up campaign
Take the cybersecurity self-assessment
All our cybersecurity services
Frequently asked questions
Are employees named in the report?
By default, no: reporting is aggregate. Rules are agreed in advance with management and, if needed, HR.
Is it legal?
Yes, with the organization’s written authorization and rules that respect employee privacy (Law 25).
Planning social engineering and phishing simulation?
Describe your situation in a few lines; an engineer will call you back quickly. The site visit and quote are free.
Request a quote
Free, no obligation. A quick answer from an engineer, in English or French.
- Free site visit and quote
- An engineer, not a salesperson
- 15+ years’ experience, across Quebec
- Hardware stocked on altea.io
Updated 2026-11-05