In short: Sophos Phish Threat is phishing simulation and security awareness training managed in the Sophos console. It provides simulation templates from beginner to expert level, automatically assigned training modules, an Outlook add-in for reporting phish and links with Sophos Email. It is licensed per enrolled user, monthly or on a fixed term.
What Sophos Phish Threat is
Sophos Phish Threat tests and trains your staff. You send realistic simulated phishing emails, see who clicks or enters credentials, and automatically enrol those people in short training. It is managed from the same Sophos console as your other Sophos products.
Sophos provides a large library of simulation templates from beginner to expert difficulty, informed by real attacks, and security awareness training modules covering security and compliance topics. Simulations and training are available in several languages, which helps organisations with multilingual teams.
What is included
| Feature | Included |
|---|---|
| Phishing, credential harvesting and attachment simulations | Yes |
| Templates from beginner to expert difficulty | Yes |
| Security and compliance training modules, assigned automatically | Yes |
| Outlook add-in for Exchange and Microsoft 365 to report phish | Yes |
| Dashboard with Awareness Factor, users caught and trends | Yes |
| Synchronized Security with Sophos Email: target users who were warned or blocked | Yes, with Sophos Email |
The Outlook add-in gives staff one click to report suspicious mail and instant feedback when they report a simulation. With Sophos Email, Phish Threat can pick out users who were warned about or blocked from risky websites and send them targeted simulations and training.
How Phish Threat is licensed
Phish Threat is licensed per enrolled user. Usage follows the users enrolled in campaigns and when their campaign emails are delivered: if all of a campaign's emails go out within one billing period, each enrolled user counts in that period, and if delivery runs across two billing periods, usage is split between them.
Sophos reports Phish Threat and Sophos Email usage together in the License Usage Summary report, and Sophos's Email product page presents Phish Threat as part of Sophos Email. If you use Sophos Email, we check whether your licence already covers Phish Threat; if not, or if you do not use Sophos Email, Phish Threat is licensed on its own, monthly or on a fixed term. Ask us for a quote.
Running a programme
Phish Threat works best as a programme rather than a one-off test. A typical approach is a baseline campaign, monthly simulations of increasing difficulty, automatic training for anyone caught, and quarterly reports to management. For Microsoft 365 you will need to allow the simulation sending addresses through your email filtering so the tests reach inboxes; we configure this for you. Training records also help evidence staff awareness for UK GDPR, insurers and Cyber Essentials preparation.
Getting started with Phish Threat
- Check entitlement: we look at your Sophos account to see what you already hold.
- Allow the simulations: we add the sending addresses to your email filtering so tests reach inboxes.
- Baseline: we run a first, simple campaign to see where you stand.
- Programme: we schedule monthly campaigns, assign training to anyone caught and send you a short report each quarter.
Who it suits and how we help
Phish Threat suits organisations already on Sophos, especially Sophos Email customers, because simulations, training and email protection sit in one console. If you want a broader awareness programme with more content and policy management, see our specialist site Security Awareness Training UK or compare options on our security awareness training page. We set up campaigns, run the programme for you if you wish and report results.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Sophos Phish Threat included with Sophos Email?
Sophos's Email product page presents Phish Threat as part of Sophos Email, and Sophos reports both products' usage together. We confirm on your quote whether your Email licence covers it; otherwise Phish Threat is licensed on its own.
How is Sophos Phish Threat licensed?
Per enrolled user. Usage depends on the users enrolled in campaigns and when their emails are delivered; if a campaign's delivery spans two billing periods, usage is split between them.
Does Sophos Phish Threat have an Outlook add-in?
Yes. The Phish Threat Outlook add-in for Exchange and Microsoft 365 lets staff report suspicious email with one click and gives instant feedback when they report a simulation.