FR 514 918-3381 Free quote
Social engineering and phishing simulation

Social engineering and simulated phishing campaigns

Most attacks start with an email or a call. We measure how your teams react, without shaming anyone, then train them.

  • 15+ years’ experience
  • Across Quebec
  • Free quote
  • Bilingual service
The service

Social engineering and simulated phishing campaigns

A simulated phishing campaign shows how many employees click, enter credentials or report the message. On request, we also test phone pretexting (fake IT support, fake wire request) and physical access by pretext. Results are reported in aggregate; the goal is better reflexes, not punishment.

What we install

  • Realistic phishing scenarios tailored to your industry
  • Decoy capture page (no passwords kept)
  • Metrics: opens, clicks, submissions, reports
  • Voice phishing and CEO fraud (on request)
  • Physical pretext access test (on request)
  • Short training after the campaign
  • Aggregate report and recommendations
  • Follow-up campaigns to measure progress
Process

How a project runs

  1. Objectives and rules with management
  2. Scenario and list preparation
  3. Campaign
  4. Training and report
  5. Follow-up campaign
Free tool

Take the cybersecurity self-assessment

Open the calculator
Cybersecurity

All our cybersecurity services

Firewall and cybersecurityA well-configured firewall, a segmented network, secure remote access and filtering: the basics that stop most attacks.Network auditIs your network slow, dropping or too expensive? We measure before concluding, then fix it.Penetration testingWe attack your network the way an intruder would, within a scope agreed with you, and hand you a prioritized fix plan.Web application penetration testingCustomer portal, online store, SaaS app or API: we look for the flaws an attacker would exploit, before they do.External penetration testingFirewall, VPN, email, websites, remote access: we map everything your company exposes online and check that nothing gives way.Internal penetration testingIf a computer is compromised or a visitor plugs in a device, how far can they go? We measure it, from the network up to the domain controller.Wi-Fi penetration testingWi-Fi spills into the parking lot. We check that an intruder outside can’t connect or hop from the guest network to the internal one.Secure code reviewWe read your code to find what outside testing can’t see: secrets, logic flaws, vulnerable dependencies and forgotten access checks.Vulnerability scanningRegular scanning of your computers, servers and devices to know what isn’t patched, with a prioritized list — not 3,000 alerts.Security configuration reviewMisconfigurations cause as many incidents as vulnerabilities. We review your critical settings against recognized good practice.Physical security assessmentDoors, cards, keys, cameras, server room: we check whether someone can get in where they shouldn’t, and tell you how to stop them.
FAQ

Frequently asked questions

Are employees named in the report?

By default, no: reporting is aggregate. Rules are agreed in advance with management and, if needed, HR.

Is it legal?

Yes, with the organization’s written authorization and rules that respect employee privacy (Law 25).

Planning social engineering and phishing simulation?

Describe your situation in a few lines; an engineer will call you back quickly. The site visit and quote are free.

Quote

Request a quote

Free, no obligation. A quick answer from an engineer, in English or French.

  • Free site visit and quote
  • An engineer, not a salesperson
  • 15+ years’ experience, across Quebec
  • Hardware stocked on altea.io

Your details are only used to reply to you.

Updated 2026-11-05

CallQuote