See the trap
before you're caught
Free, interactive phishing training. No signup required. Progress stays in your browser. Build the instincts that keep attackers out.
Choose your training
Six interactive scenarios covering every attack vector. Start with one, master them all.
How it works
Three steps from zero to threat-aware.
Analyze
Examine real-world phishing attempts in a fully safe, sandboxed environment. No credentials at risk. Ever.
Identify
Spot the red flags — suspicious senders, urgency tactics, homoglyphs, domain spoofing — that separate phishing from legitimate messages.
Protect
Build instincts through repetition. The muscle memory you develop here protects you and your entire organization from real attacks.
Train on any device
Desktop, tablet, or phone — just open the site and start training. No install, no account, and your answers never leave your browser.
Bring phishing training
to your team
- Share free, realistic phishing modules with your staff or students
- Keep learner progress local on the public site
- Use aggregate analytics signals without employee-level surveillance
- Fork and self-host when you need custom scenarios or private reporting
- Pair training with your real reporting and escalation process
without a paywall
Stay ahead of emerging threats
New phishing tactics appear every week. Get notified when we add new modules and scenarios.
No spam. Unsubscribe anytime. We respect your privacy.