About
Why BaitProof exists.
BaitProof exists for the business owner who just learned their cyber-insurance renewal asks 'do you run phishing simulations?' — and realized the answer is no.
The enterprise answer is KnowBe4: quote-based, sold through sales calls, built for IT teams. The DIY answer is GoPhish: free, and costs your weekends. BaitProof is the third option: done-for-you simulations and 5-minute trainings at a flat price, with quarterly proof your insurer accepts.
Our safety rules are hard, not marketing: we only ever simulate your own employees, with your written authorization. Every email is labeled, every landing page discloses the test, and we never collect credentials. Training that tricks people into handing over passwords isn't training — it's the thing we're training against.
What we won't do
- Simulations run only against the customer's own employees, with their explicit written authorization.
- Every landing page discloses the simulation. No credential fields, ever — we track clicks, never credentials.
- v1 renders simulations; it does not send email. Delivery is a per-customer step with written authorization.
- We never claim guaranteed outcomes or use breach statistics we didn't measure ourselves.