This guide describes the four main types of remediation campaigns available on the platform, with their activation conditions, target inclusion criteria, and specific configurations.
Remediation Weak Users
Remediation Worsened Users
Remediation
Custom Remediation
Video attack / USB / QR code / adaptive remediation types are part of the Phish Pro service (refer to specific articles)
Remediation management occurs in the dedicated "Release Management" section within "Remediation".
Note: once a remediation is approved, it is not possible to modify its data.
Remediation Weak Users
🟢 When available:
After completion of at least 3 standard campaigns.
🧩 Composition:
At creation, templates are associated, preferably of low difficulty.
Some templates can be disabled during approval.
👥 Target:
Includes all targets classified as "weak" in the last completed standard campaign.
Some targets can be manually excluded during approval.
🔁 Structure:
Consists of a campaign cycle (e.g. 4 campaigns), configured at system level.
The frequency (e.g. twice a week, once a week) is decided during approval.
🔹 Remediation Worsened Users
🟢 When available:
After completion of at least 3 standard campaigns.
🧩 Composition:
Templates of medium-low difficulty.
Templates are modifiable during approval.
👥 Target:
-
Includes targets that have worsened compared to the previous standard campaign, in one of the following ways:
From strong/intermediate to weak.
From strong to intermediate.
From defenders to intermediate or weak.
Targets can be manually disabled during approval.
🔁 Structure:
Campaign cycle preconfigured (e.g. 4 campaigns).
Frequency to be decided during approval.
🔹 Remediation Higher Risk Users
🟢 When available:
After completion of at least 3 standard campaigns.
🧩 Composition:
Templates of medium-low difficulty.
👥 Target:
Includes users with the highest click rate among those who participated in the last completed standard campaign.
The inclusion percentage is configurable (typically 20%).
Some targets can be excluded during approval.
🔁 Structure:
Campaign cycle (e.g. 4 campaigns), configured at system level.
The frequency is established during approval.
🔹 Custom Remediation
When available:
After completion of at least 1 standard campaign.
🧩 Composition:
During approval you select active templates, global or company-level, of type email or SMS (if enabled).
👥 Target:
Free selection among participants (they must have been targets of at least 1 standard campaign before)
📅 Structure:
-
Single campaign, with:
Start
Send duration
Campaign duration
freely configurable.
Remediation Data Visibility
Remediation data can be viewed in the Statistics > Remediation Report section once the remediation is complete. The remediation becomes visible in this section only at the end of the cycle.
For custom remediation, upon completion you can download a detailed report from the same section. For other types, instead, an aggregated summary is provided (e.g. x users out of y total improved their status during the remediation cycle, or x weak users out of y were recovered).
Conversely, to monitor phishing campaign performance in real time, you can consult the STATISTICS > PHISHING REPORT section, from which you can also download the global report.
Activating multiple remediation simultaneously
It is possible to activate multiple remediation types simultaneously. However, it is important to remember that each user can participate in only one remediation at a time, even if they have been included in multiple active remediation. The system automatically manages conflicts, preventing the same user from being involved in multiple remediation simultaneously.
There is only one exception to this rule. If a user is assigned simultaneously to:
a standard remediation (those proposed by the system), and
a custom remediation,
then they can participate in both.