Phishing & Social Engineering Simulation
Your people are your perimeter. We test them the way a real attacker would — across every channel.
The problem
Security awareness training doesn't work. Realistic pressure does.
Most organisations run an annual phishing test, tick a compliance box, and move on. Meanwhile, adversaries are calling your finance team, texting your EA, and walking into your lobby with a fake badge — not just sending emails.
HAWK simulations replicate the full social engineering kill chain — email, voice, SMS, and physical pretexting — coordinated into realistic scenarios that test how your people actually respond under pressure, not how they perform on a quiz.
Every campaign is custom-built around your organisation — your industry, your org chart, your actual threat landscape. We don't send template emails to a list. We build scenarios your people will believe, because real attackers do the same.
Simulations are followed by targeted coaching, not shame. Staff who click get immediate, private micro-training. Leadership gets trend data, department heat maps, and a clear remediation roadmap they can act on.
For clients on our Managed Security or HAWK ONE programmes, simulation data feeds directly into your ongoing risk posture — closing the loop between testing and protection.
Plan a simulation →Reconnaissance & scenario design
OSINT on your organisation, key personnel, and current events to craft scenarios indistinguishable from real attacks — tailored by department, seniority, and language.
Multi-channel delivery
Coordinated campaigns across email, voice calls, SMS, messaging apps, and where agreed, physical pretexting — mirroring how sophisticated adversaries actually operate.
Coaching, not shaming
Immediate private micro-training for anyone who engages. No public leaderboards. No blame. Just rapid skill-building where it matters most.
Executive intelligence
Department heat maps, trend analysis across quarters, and board-ready reporting that connects simulation results to real risk reduction.
Attack vectors we simulate
Real attackers don't stick to email. Neither do we.
Spear phishing
Highly targeted emails crafted from OSINT — impersonating suppliers, executives, or trusted contacts with cloned domains and realistic payloads.
Vishing
Live voice calls impersonating IT support, bank representatives, or senior leadership — testing verbal verification procedures and escalation instincts.
Smishing & messaging
SMS, WhatsApp, and messaging app lures targeting personal devices — where corporate security controls rarely reach.
Physical pretexting
In-person social engineering — impersonating contractors, couriers, or visitors to test reception procedures, tailgating controls, and clean-desk policies.
Baiting & media drops
USB drops, QR code lures, and planted devices in common areas — testing curiosity controls and unknown-device procedures.
Executive impersonation
Targeting finance, HR, and EA teams with urgent requests from spoofed executive identities — the attack behind most six-figure losses.
What you get back
Every simulation produces intelligence you can act on — not just a pass/fail score.
- Department heat maps — see exactly which teams are most vulnerable and where to focus training budget.
- Time-to-report metrics — measure how quickly staff escalate suspicious activity, not just whether they clicked.
- Trend analysis — quarter-over-quarter tracking that shows real behavioural change, not just awareness fatigue.
- Targeted micro-learning — role-specific coaching modules triggered by simulation results, delivered privately.
- Board-ready summaries — executive reporting that connects simulation outcomes to organisational risk posture.
Safe & controlled
All payloads are inert. No real credentials are harvested. Every campaign runs within agreed rules of engagement with your security team in the loop.
Integrated with your stack
Results feed into your SIEM, security awareness platform, or HAWK Managed Security dashboard — no manual export required.
Escalation playbook included
Every engagement includes updated escalation procedures and quick-reference cards your teams can keep at their desks.
Programme tiers
From a single targeted campaign to a year-round adversary simulation programme.
Campaign
Targeted strike
- Single multi-channel scenario
- Post-campaign coaching sessions
- Executive metrics + remediation plan
- Escalation playbook & quick-ref cards
Programme
Quarterly cadence
- Four unique multi-vector campaigns per year
- Role-based micro-learning between runs
- Trend analysis + leadership workshops
- Department heat maps & board reporting
Integrated
Continuous adversary
- Monthly simulations across all vectors
- Feeds into Managed Security & HAWK ONE
- Real-time dashboard + SIEM integration
- Annual tabletop exercise with leadership
