1️⃣ Template selection
There are three ways to select your templates:
From our template library
Via AI using a prompt
Manually, from scratch
👉 Option 1: from our template library
I select my templates from the RIOT library by clicking on "Browse library"
👍 Good to know: You can click on "Manage" at the top left to display the templates by tool and save time.
👉 Option 2: via AI using a prompt
I use the AI to generate my templates by clicking on "Create a template"
I write a prompt according to my needs
I choose an already created prompt from the suggestions offered
👍 Good to know:
If you generate the template via AI you will not be able to modify or insert elements on the template afterwards.
👉 Option 3: manually, from scratch
I want to create a template from "scratch"
A large number of options are available for inserting elements:
A link
an image
An attachment
A dynamic attribute (manager's name, manager's email, etc.)
2️⃣ I customise my templates
👉 Case 1: My template does not require any modification
I can see a black pen when I move my mouse over it. You won't need to change anything.
👉 Case 2: I can customise certain fields on my template.
I can see a yellow dot when I move my mouse over it. It means that you can change some fields to match with your scenarios.
👍 Good to know: The fields in yellow are fixed fields. They will not be translated.
3️⃣ Template difficulty
Every template carries a difficulty rating — Easy, Medium or Hard — indicating how hard it is, for an ordinary employee, to spot that it is a phishing attempt.
This rating is calculated automatically from the template's content. It appears on each template card, works as a filter in the catalogue, and shows up in the campaign report, where the vulnerability rate is broken down by difficulty level.
4️⃣ Smart Variables
Smart Variables let you insert elements into a template that fill in automatically for each recipient. The same template then produces a different email depending on the employee targeted and the workspace concerned, without you having to create one variant per population.
They are available on all workspaces, for phishing as well as smishing.
👍 Good to know: changing a template's Smart Variables can shift its difficulty rating, since personalisation is one of the cues taken into account. The new rating applies when you save.
👉 The detail of the available variables, how to change them and the pitfalls to know about are described in Smart Variables in your Simulation templates.
5️⃣ Which template does each employee receive?
You select several templates in a campaign, but each employee only receives one per attack. The choice is made automatically, and it isn't entirely random:
Riot draws at random among the templates selected for the campaign;
giving priority to templates the employee has never received, including in previous campaigns.
👍 Good to know: if an employee has already received every template in the campaign, priority goes to the one they received longest ago. That is why two employees in the same campaign don't get the same message — and it is intentional.