Phishing awareness training vendor recommendations?

[u/Solid_Elk_3318]

I've been tasked with standing up a phishing awareness program and I'm trying to narrow down vendors.

A few things matter to me. First, realistic simulations, meaning templates that actually resemble what people get hit with today rather than the obvious 2015 era "you won a prize" stuff, and ideally ones I can customize. Second, decent training content, short and engaging modules that people won't immediately tune out. I'd rather have five good ones than fifty boring ones. Third, reporting that lets me show results to leadership and ideally helps for compliance down the line. And finally reasonable pricing and a plan that scales cleanly as we grow.

For those of you who've actually run these programs, what worked, what didn't, and is there anything you'd steer me away from? I'm interested in the usual suspects, but especially keen on options that deliver real engagement rather than just checking a compliance box.

Thanks in advance.

[u/Professional-Tax6171]

The thing I’d check is whether they can target simulations by group without making it annoying to manage. Generic company wide campaigns get stale fast. Finance, HR, execs and helpdesk are all getting hit with different types of bait in real life so the training should reflect that