Real phishing simulations. Interactive training. No corporate fluff.
Build your instincts against phishing & social engineering — for free.
Short, focused lessons on homographs, URL shorteners, spoofing, social engineering and more. Each ends with an adaptive quiz.
Explore lessons →Real vs fake emails side by side. Click the suspicious parts before time runs out. The most addictive way to build your instincts.
Start training →Earn badges as you progress. From Phish Spotter to Human Firewall. Track your level and share your achievements.
See badges →Learn how attackers use lookalike characters to fake domains. pаypal.com vs paypal.com — can you tell?
Start lesson →bit.ly/xK9z2 — where does that actually go? Understand how shortened URLs are used to hide malicious destinations.
Start lesson →Urgency. Authority. Fear. How attackers manipulate your emotions to bypass your logic. Recognize it before it's too late.
Start lesson →Most training stops at detection. We go further. Learn the exact steps to take after falling for a phishing attack — because anyone can make a mistake.
Read the guide →Cut your internet connection to prevent further data exfiltration.
Start with email and banking — use a different device if possible.
Alert your IT team or security contact. Speed matters.
Add a second layer of protection to all critical accounts.
Free. Open source. No tracking. Just training.
Create your account →Or contribute on GitHub ↗