About us
What do we do?
Boxphish is a low-touch cyber security awareness training platform that arms organisations—and their people—with the tools and knowledge needed to reduce the risk of cyber attacks. This is achieved by combining real-world phishing simulations, quality training content and actionable analytics into a single platform. The platform is simple to deploy, easy to manage and proven to boost organisation-wide cyber awareness, fast.
Since 2018, we’ve been helping organisations including Macmillan, Police Scotland, Eurocell, Cambridge University and North Yorkshire County Council strengthen their cyber defences by empowering their people to spot cyber attacks. Along the way, we have set the standard for what a people-first approach to cyber-SAT looks like, and how to measure it.


Why do we do it?
Effective cyber risk mitigation goes beyond technical controls. We are being targeted everyday by increasingly sophisticated cyber-attacks and it’s catching us out. 50% of organisations experience an attack at least once a month, and of those attacks, 68% are a direct result of human error.
Your people are often your first line of defence against attacks, so it’s incredibly important that they know exactly what to look for. Through a combination of phishing simulations and regular training, you can quickly build a cyber aware culture that is proven to mitigate the risk of attack.
PROVEN SOLUTIONS











