Skip to main content

Analyze the KPIs of my phishing campaigns

From the Simulation, tab, you can easily consult and export data relating to your campaigns.

1️⃣ Introduction

👉 2 types of data are available:

  • Global on all my campaigns

  • Restrictive on a specific campaign

👉 Main indicators:

  • Vulnerability rate: number of people who have submitted their identifiers out of the total audience

  • Click-through rate: number of people who clicked on a link in the e-mail, out of the total audience

  • Attacks sent: Number of attacks sent at time T on my campaign.

  • Open rate: Number of people who opened the e-mail out of the total audience

  • Reporting rate: Number of people who reported the e-mail out of the total audience

2️⃣ View my data

👉 Simplified view of my main indicators:


👉 Go further using the “Show more” button:

👉 Change the analysis period for your simulation data:

3️⃣ Export my data

👉 Export my campaign data: Just click on your campaign, click on the “...” at the top right of your screen and then on “Download as CSV”.

👉 Export and compare data by group: You can also compare data from different groups and export them easily by clicking on “Show more” then on “Compare” at top right

4️⃣ Positioning yourself with benchmarks

Is a 12% click rate good or bad? Without a point of comparison, the question stays open. Your key indicators therefore come with a reference line and a badge showing whether you are above or below average.

👉 What you are compared to

  • Standalone workspace: an anonymous average of workspaces comparable to yours.

  • Workspace within an organization: your organization's internal average.

  • Organization: organizations of a similar size.

The workspaces treated as comparable have a headcount close to yours and sufficient coverage: recent or lightly used workspaces are excluded, so that the comparison is based on real activity.

👍 Good to know: the benchmark is a target, not a grade. The workspaces you are compared to are active and engaged: being "below average" doesn't mean you are failing, it shows the gap that remains to be closed.

👉 Three other useful readings

  • Your most vulnerable groups, so you know where to concentrate your effort. Your starred groups appear first.

  • A coverage warning if some of your employees haven't been tested. It offers to launch, in one click, a campaign targeting employees not attacked in the last 90 days — the fastest way to close a blind spot.

  • A trend on your key rates, calculated over a rolling 90-day window and compared with the previous 90 days.

The vulnerability rate is also broken down by template difficulty. That is the most telling reading over time: failing on difficult templates after having stopped failing on easy ones is progress, even if the overall rate barely moves. See Template difficulty: Easy, Medium, Hard.

5️⃣ Exporting your report as a PDF

From the indicators detail panel, a button lets you download a PDF covering the key metrics for your workspace or your organization, together with the comparison markers.

This is the format to use for a leadership committee or an audit file: you no longer have to reassemble screenshots into a presentation.

Did this answer your question?