Features
Everything BaitProof does.
Every feature below is labeled honestly: shipped features are described as-is, and anything not yet built is marked (roadmap). Tiers that gate a feature are named in parentheses.
Monthly phishing simulations
6 templates today — package delivery, password expiry, invoice, HR benefits, shared docs, CEO request (the spear-phishing lure) — with a 12-template rotation on the roadmap.
Click + open tracking
Per-employee results: who opened, who clicked, who reported. Tracking pixels and tokens — never credentials.
Disclosure landing pages
Every click lands on a page that says 'this was a simulated phishing test' with 5-minute training. No credential fields, ever.
5-minute micro-trainings
Delivered on the disclosure landing page every clicker reaches: a focused 5-minute lesson. A standalone assignable module library is on the roadmap.
Security policy pack (Growth+, roadmap)
Acceptable-use, password, and incident-response templates with employee e-acknowledgment. On the roadmap — not yet shipped.
Insurance-ready quarterly report (Growth+, roadmap)
Click-rate trend, report rate, training completion — formatted for underwriters and auditors. On the roadmap; per-campaign reports (click/report rates, needs-training list) are available today via the API.
MSP workspaces (MSP)
Up to 50 client workspaces with per-tenant API keys and per-client reporting via the API. White-label reports are on the roadmap.
Phish-report guidance (Growth+)
Report-button setup guidance for Outlook and Gmail — operator guidance at onboarding, not a mailbox plugin.