Frequently asked questions
Straight answers to the questions we hear most.
For companies that have never done phishing training
Do I even need phishing training? We're only 25 people.
Attackers don't filter by company size. Phishing emails go out by the millions. Your 25 employees get the same emails as a 25,000-person bank. The difference is that your team may not be trained to spot them.
We've never had a security incident. Why start now?
You may have had one without knowing it. Most credential theft is silent. The attacker gets a password, logs in, and watches for weeks before acting. They read emails, learn your processes, and wait for the right moment. Training helps your team catch these emails before they become six-figure problems.
I don't have an IT department. Can I run this?
That's who we built this for. If you can upload a spreadsheet and click a few buttons, you can run PhishPlease. You can be running in 10 minutes. After that it runs itself. Campaigns send on schedule, training starts when someone clicks, and reports build themselves.
Won't my employees think I'm trying to trick them?
They might, the first time. After a few campaigns, they start catching the simulations. Then they start catching real phishing emails too. Most employees come to appreciate it once they see it's making them sharper. Frame it as training, not punishment. PhishPlease is built to teach, not embarrass.
I only have 12 employees. Is this worth it?
One employee clicking a real phishing email can cost an SMB $50,000+. At $89.99/month (up to 30 users included), PhishPlease costs less than a single compromised password. You'd insure a $50,000 asset for under $1,080/year without thinking twice.
How long before we see results?
Your first campaign sets a baseline click rate. Regular simulations and short lessons bring it down over the following months. You can track the change in your dashboard from the first campaign.
For companies evaluating the product
Will my employees be annoyed?
Yes, at first. That's normal. The simulations are built to teach, not embarrass. Employees who click get a short lesson on what they missed, not a lecture. After a few rounds, most people appreciate it. The goal is changed behavior, not gotcha moments.
Will this satisfy my insurer?
You get PDF reports showing simulation frequency, employee participation, click rates and training completion. These are the metrics insurers ask for. Attach them to your renewal application or email them to your broker.
How is this different from KnowBe4?
KnowBe4 is built for larger companies with security teams, priced per seat on yearly plans. PhishPlease is $89.99/month for up to 30 users (about $3/user), month to month with no contract. We focus on what SMBs use: realistic simulations, automated training and compliance reporting. If you have 500+ employees and a security team, KnowBe4 may suit you better. If you have 15-200 employees and one person to run this, PhishPlease is built for you.
What if nobody clicks?
Then your team is sharper than most. If your rate is low, we raise the difficulty automatically so the simulations stay realistic. The goal is to keep your team challenged, not to rack up failures.
Can employees tell it's a test?
That's the point. Our templates copy real attacks and are built to convince. Employees who learn to spot our simulations will spot real ones. If everyone catches every simulation right away, we raise the difficulty.
Do you send fake text messages (SMS phishing)?
No. Mobile carriers don't allow simulated phishing texts, so we don't send them. We test by email, where most attacks start, and the training still teaches your team to spot scam texts, phone calls and QR codes. Voice phishing (vishing) simulations are coming soon.
What's the guarantee?
If you experience a successful phishing attack while actively using PhishPlease (running regular campaigns and training), we refund your last 3 months. No other phishing training platform offers this. We can afford to because the product works.
Can I cancel anytime?
Yes. Month-to-month billing, no annual contract, no cancellation fee. Cancel from your dashboard. Your data stays available for 30 days so you can export reports.
Still have a question?
We reply within 24 hours. Or start your free trial. The trial is the demo.