Kynet | Security awareness training & phishing simulation
In the AI era, people are the prime target.
Test, train and retest — turn people risk into numbers you can see and improve.
Phishing keeps evolving
The days of obvious fake emails are over
Natural emails written by AI
AI writes flawless, tailored fake emails at scale.
Look-alike domains
Look-alike characters and short links make fake addresses hard to spot.
Fake sign-in pages steal passwords
Exact copies of email or business sign-in pages capture what you type.
Abuse of trusted services
Links hosted on trusted cloud services slip past email filters.
The threat in numbers
What the numbers say about people risk
Click rate on AI-generated phishing (vs 12% for traditional)
Source: Microsoft, Digital Defense Report 2025
Share of phishing emails containing AI-generated content
Source: SlashNext, The State of Phishing 2023
seconds: median time from opening an email to clicking
Source: Verizon, DBIR 2025
Average cost of a breach that began with phishing
Source: IBM, Cost of a Data Breach Report 2024
Annual losses from business email compromise (BEC)
Source: FBI, IC3 Internet Crime Report 2024
Drop in click rate after 12 months of training (33.1% → 4.1%)
Source: KnowBe4, Phishing by Industry Benchmarking 2025
Figures come from the publicly released reports named above. Your own baseline is measured in the first company-wide simulation.
Our approach
Test, train, retest — and get measurably stronger
Not a one-off event: we keep repeating test, analysis, training and retest.
- 1
Test
Measure with realistic simulations
- 2
Analyze
Find weak spots by team, region, role
- 3
Train
Training matched to who clicked
- 4
Retest
Check results after 4–6 weeks
Four levels of training
Learn on the spot
Right after a click, a 2–3 minute page explains what gave the email away.
Targeted training
Focused courses based on which emotional triggers work on them.
Ongoing education for everyone
Onboarding and regular courses on phishing, passwords and data handling.
Executive workshops
Hands-on workshops using real cases.
Kynet features
From setup to analysis, all in one place
Dashboard
See sent, opened, clicked, submitted and reported at a glance.
Campaign management
Run campaigns for several teams and scenarios at once.
Target groups
Group people by team, region and role.
Templates
Common lures: expiring passwords, shared files, approvals, deliveries and more.
Landing pages
Training sign-in pages run in an isolated environment and are deleted afterward.
Sending infrastructure
Dedicated IPs, warm-up and blacklist monitoring for reliable delivery.
Full tracking
Track delivery, open, click and submission.
Japanese, English, Chinese UI
One interface for multi-country teams.
Roles & audit logs
Role-based access and activity logs.
Three plans
Choose by security maturity
Pricing is quoted by headcount, industry and requirements. If unsure, start with Standard and decide based on the data.
Basic
Once a year
For first-time programs. Measure your company-wide baseline.
- 1 company-wide test (1–2 scenarios)
- Basic analysis report
- 1 management briefing
- On-the-spot learning for clickers
Standard
Quarterly
For companies making training a habit.
- Quarterly (4 per year), 4 scenarios
- Adaptive difficulty
- Full reports with trends
- Quarterly briefings
- Micro-learning plus targeted training
Advanced
Monthly
For companies with audit, insurance or board reporting needs.
- Monthly (12 per year), all scenarios
- Customized by role
- Live dashboard and monthly/quarterly/annual reports
- Board briefings
- Integrated with ARGIS
How a round works
Six steps, about two weeks per round
- 01
Plan
1–2 days
Scope, org data, scenarios
- 02
Prepare
2–3 days
Build emails and pages; test internally
- 03
Run
3–5 days
Send in batches and monitor
- 04
Analyze
1–2 days
By team, region and role
- 05
Report
1–2 days
Weak points and training advice
- 06
Train & retest
Ongoing
Retest after 4–6 weeks
Rules that keep it safe
The goal is a stronger company, not blaming employees
Run in line with Japan’s APPI and Singapore’s PDPA.
Never used for performance reviews
Results are used only to raise awareness.
Individuals stay anonymous
Reports show statistics only.
Real passwords are never stored
Nothing typed is kept, and no personal data is collected.
Only our own domains
We never spoof your internal domains.
Works with ARGIS
Training becomes the front door to security operations
Press the report button and ARGIS analyzes it immediately — so real suspicious emails are handled fast, too.
Employee
- Spots a suspicious email
- Presses the report button
ARGIS
- Analyzes the email at once
- Finds others who got it
- Alerts and responds as needed
Kynet
- Tracks report rates
- Feeds the next round
Start by measuring your company-wide baseline.
The first round shows which teams and which lures are your weak spots.