For IT managers and security leads

Another security tool is the last thing you need. This one runs itself.

You've already got filters to tune, alerts to triage, and tools that promised to reduce your workload and somehow created more of it. You don't need more things to manage. You need more secure users.

Your filters catch most things. The ones that get through rely on a user clicking at the wrong moment. No filter fixes that. Training the user does.

The problem with most phishing awareness training is that it's a one-off event dressed up as a programme. You roll it out, you chase completions, you report the numbers upward, and three months later you're back to square one because knowledge fades without practice.

PhishClub isn't training in that sense. It's a standing exercise that runs in the background all year. Your users send and receive test phishing links — from each other — as part of an ongoing game. The repetition is what builds the reflex. You don't have to chase anyone. Human nature does it for you.

What onboarding actually looks like

You upload a list of names and email addresses. That's the onboarding. No software deployment, no SSO integration to wrestle with, no learner accounts to provision. Everyone gets a magic link by email and they're in.

After that, it runs on a weekly cadence without you touching it. New links drop automatically. Scores update. You get a summary if you want one, or you let it run in the background and come back to it when you need to demonstrate what you've been doing about phishing.

CSV
upload to onboard your whole team
Zero
ongoing management after setup
£3
per user per month

Free 14-day trial. Set up in under ten minutes.

Start free trial

£3 per user per month after trial. No long-term commitment.

See how it works

Step through a week in the life of a PhishClub team.

Monday morning
From PhishClub <game@phishclub.co.uk>
To sarah@yourcompany.co.uk
Subject Your links for this week are ready

Hi Sarah,

Your phishing links for this week are live. Head to your portal to disguise them and send them to your colleagues.

You're currently 4th on the leaderboard. Three catches puts you in second.

Go to my portal →
Each week, every player gets fresh phishing links delivered to their inbox.
Sarah gets to work
Link disguiser
https://phishclub.co.uk/c/xK9mTq
Q3 expenses — can you approve this? 👀
Copied to clipboard ✓
Players disguise their links with any display text they choose. The cleverer the disguise, the more likely someone clicks.
Sarah makes her move
💬 Team Slack — #general
Marcus
Anyone fancy lunch at that new place on King Street?
Priya
Yes! 12:30?
Sarah
Sounds good. Marcus — before you head out, can you look at this? Finance are asking. Q3 expenses — can you approve this? 👀
The link goes out through whatever channel they use — Slack, email, WhatsApp. It looks like something a colleague would actually send.
Two minutes later
🎣 You caught one!
Marcus clicked your link
+1
your score
−1
Marcus's score
2nd Sarah 7 pts
3rd Marcus 4 pts
Points update in real time. Marcus can see exactly who caught him — and how.
The following week
💬 Team Slack — #general
Sarah
Marcus — IT flagged something on your account. Can you check this quickly? Action required: verify your access
Marcus
Hmm. She got me last week with an expense link.
I'm hovering but not clicking.
Marcus
Nice try Sarah 😄
That pause before clicking — that's the reflex. Built through experience, not a training slide.