Skip to content

Social Engineering

You can train your employees to spot phishing emails and suspicious calls, but do you know whether the training works? A CoNetrix Social Engineering Test shows how your team responds to realistic attacks, so you know where to focus your training.

SEC-SocialEngineering

Safe Testing, Smarter Training

We test your employees the way attackers do, by email and by phone, without putting your organization at risk. The emails and calls are built to look like real-world attacks, so the results show how people actually behave, not how they think they would.

Then we help you use what we learn. The results show you which topics need more attention and where your training is already working. Reports sort findings by risk and are easy to read, so you can take them straight to your team.

Service Features

Our social engineering tests use two methods: phishing emails and phone calls. Each campaign can be tailored to mimic common attacks, and the main goal is to measure how effective your security awareness training really is. A Social Engineering Test can be performed on its own or added to an External Penetration Test. Engagements can be adjusted to fit your size and how often you want to test.

  • Simulated phishing email campaigns tailored to mimic common real-world attacks

  • Tests of clicking links or attachments in unsolicited emails

  • Tests of submitting confidential information to untrusted websites

  • Login attempts on a mock version of your website

  • Tests of downloading and installing software or security updates

  • Phone call campaigns that try to persuade employees to share information or log in to a mock site

  • Findings sorted by risk, with free findings management software

  • Stand-alone engagement or add-on to an External Penetration Test