Security awareness activity that simulates realistic phishing attacks against an organization’s employees to measure risk exposure, identify vulnerable users, and strengthen threat recognition capabilities. Includes controlled fake phishing campaigns, click rate and credential submission metrics, personalized training paths, and management reporting.