1️⃣ Introduction
👉 Two levels of data are available:
overall data, across all your campaigns;
detailed data for a specific campaign.
👉 The main KPIs:
Vulnerability rate: number of people who submitted their credentials, relative to the total audience.
Click rate: number of people who clicked a link in the email, relative to the total audience.
Attacks sent: number of attacks sent in your campaign at a given moment.
Open rate: number of people who opened the email, relative to the total audience.
Report rate: number of people who reported the email, relative to the total audience.
👍 Good to know: Riot ignores the activity of security scanners (such as Microsoft Defender Safe Links) that open emails and click links before your employees do. If you are a Microsoft 365 customer, your open and click rates therefore drop from mid-September 2026: this is expected, and these figures are more accurate. The results of your past campaigns do not change. See Why doesn't employee activity on phishing emails look right in Riot?
2️⃣ View your data
👉 Simplified view of your main KPIs:
👉 Go further with the "See more" button:
👉 Change the analysis period for your Simulation data:
3️⃣ Export your data
👉 Export a campaign's data: click your campaign, then the "…" at the top left of the screen, and finally "Download as CSV".
👉 Compare data by group and export it: click "See more", then "Compare" at the top right.
4️⃣ See where you stand with benchmarks
Is a 12% click rate good or bad? Without a point of comparison, the question remains open. Your key KPIs therefore come with a reference line and a badge showing whether you are above or below average.
👉 What you are compared with
Standalone workspace: an anonymous average of workspaces comparable to yours.
Workspace within an organization: your organization's internal average.
Organization: organizations of a similar size.
Workspaces selected as comparable have a headcount close to yours and sufficient coverage: recent or little-used workspaces are excluded, so that the comparison is based on real activity.
👍 Good to know: the benchmark is a target, not a grade. The workspaces you are compared with are active and engaged: being \"below average\" doesn't mean failing, it shows the gap that remains to be closed.
👉 Three other useful readings
The most vulnerable groups, so you know where to focus your efforts. Your favourite groups appear first.
A coverage alert if some of your employees have not been tested. It offers to launch, in one click, a campaign targeting employees who have not been attacked in the last 90 days: this is the quickest way to close a blind spot.
A trend on your key rates, calculated over a rolling 90-day window and compared with the previous 90 days.
5️⃣ Export your report as a PDF
From the KPI detail panel, a button lets you download a PDF containing the key metrics of your workspace or organization, with the comparison benchmarks.
This is the format to use for an executive committee or an audit file: you no longer need to piece together screenshots in a presentation.
Key takeaways
Five key KPIs: vulnerability, clicks, attacks sent, opens and reports.
Security scanner activity is not counted: the rates reflect your employees' real actions.
Data can be exported as CSV per campaign, and as a PDF for a summary report.
Benchmarks show where you stand compared with similar workspaces or organizations.