In short: usecure uPhish is the phishing simulation module of the usecure platform. AutoPhish sends realistic simulated phishing emails at varied times, tracks opens, clicks and compromises, and automatically enrols anyone who falls for one in short training. uPhish is included in the usecure per-user plan, supplied monthly by Forever Systems.
What uPhish is
uPhish lets you send safe, simulated phishing emails to your own staff to see who opens them, who clicks and who would have handed over their password. The point is not to catch people out but to give them practice spotting the real thing, and to show you where more training is needed.
uPhish is built into the usecure platform alongside uLearn, so a failed simulation leads straight to a short, relevant lesson rather than a telling-off, and the result feeds each user's risk score.
Key capabilities
- AutoPhish: schedules simulations automatically and sends them at varied times, so staff cannot spot a pattern and administrators do not have to plan each campaign.
- Template library: pre-built templates impersonating well-known brands, based on current attack trends and available in multiple languages, plus a builder for your own scenarios.
- Spear-phishing: target scenarios at specific users or departments, and simulate internal impersonation using domain spoofing, for example a fake message from the finance director.
- Modern lures: QR code and attachment simulations, reflecting how attacks have moved beyond simple links.
- Landing pages: an email and landing page builder to recreate convincing login pages.
- Just-in-time training: users who click or enter credentials are enrolled in short training automatically.
- Reliable delivery: usecure uses message injection to place simulations directly in inboxes.
- Reporting: real-time results across users, teams and the whole organisation, from opens through to compromises.
What is included
| Feature | Included in the usecure plan |
|---|---|
| AutoPhish automated campaigns | Yes |
| Open, click and compromise tracking | Yes |
| QR code and attachment simulations | Yes |
| Multilingual template library | Yes |
| Email and landing page builder | Yes |
| Phishing reporting dashboard and exports | Yes |
| Automatic training for users who fail | Yes, through uLearn |
There is no separate premium edition of uPhish; everything above is part of the standard usecure human risk management plan.
How uPhish is licensed
uPhish is licensed as part of the usecure platform, per user, together with uLearn, uPolicy and uBreach Starter. We bill it monthly on your Forever Systems invoice, with the user count following your directory sync from Microsoft 365 or Google Workspace. A trial is available, which is a good way to run a first baseline simulation. Prices depend on the number of users, so ask us for a quote.
Requirements and deployment
uPhish is cloud-hosted and needs nothing installed on devices. The main technical step is making sure simulations are not blocked by your own defences: usecure's message injection delivers them straight to inboxes, and we configure any allow rules your email security needs so results are not distorted by filtering.
We recommend telling staff that simulations will run, without saying when. It builds trust and fits the NCSC's view that staff should be supported, not blamed, when they are caught out by phishing. For more on running simulations well, see our security awareness training category.
How we help
We set up uPhish, connect your directory, configure delivery and run a baseline campaign. We then let AutoPhish run, review the results with you, and adjust difficulty and templates to match the attacks your sector actually sees. Contact us to start with a trial.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Will uPhish simulations be blocked by our email filter?
usecure uses message injection to deliver simulations directly to inboxes. We also configure any allow rules your email security product needs so simulations arrive as intended.
Does uPhish include QR code phishing simulations?
Yes. usecure includes QR code and attachment phishing simulations in the standard plan, alongside link-based campaigns.
What happens when a user clicks a uPhish simulation?
The click is recorded and the user is automatically enrolled in short, relevant training through uLearn. Their result also feeds their personal risk score.