The Dashboard of Phishing Simulation is a read-only analytics view of the phishing simulation program, reserved for administrators. You can access it from the left menu at Phishing Simulation › Dashboard, and it shows on a single page whether your organization's resilience is improving over time, who is most exposed, and which attacks are most effective. The Dashboard does not send or configure any simulations: it reads and presents data that has already been collected. Campaign creation and email selection happen in other areas of Phishing Simulation.
The Phishing Simulation Dashboard: header filters, the Click Rate Over Time chart, Simulation Rates indicators, the Compromising Actions chart, charts by segment, and the Data per User table.
Before you start
For the Dashboard to display data, certain conditions must be met:
- Role: an administrator with the Dashboard permission for Phishing Simulation (the same permission also opens the detailed view of individual emails).
- Available data: at least some simulations must have been sent and recipients must have interacted with them. Without activity, the chart, indicators, and table show an empty state.
- Location set: the chart by location appears only when at least one employee has a location assigned.
Dashboard filters
At the top you'll find the controls that define the scope of all panels: each change updates the entire page simultaneously.
| Filter | What it does |
|---|---|
| Timeframe | Sets the time interval for the entire Dashboard: 1 Month, 3 Months, 6 Months (default), 12 Months, Year to date, Max, or a custom interval (Custom). |
| Campaign type | Limits data to all campaigns (All), automatic campaigns (Automatic), or custom campaigns (Custom). |
| Department | Limits all panels to a single department. |
| Show active users only | Includes or excludes inactive employees across the entire Dashboard. |
| Click on a month in the chart | Locks the Dashboard to that single month; a label appears that you can remove to return to the full interval. |
Which simulations are included
The Dashboard collects all simulations: automatic campaigns, custom campaigns, and trial campaigns. Trial campaign results are included by default and can be excluded with the Include trial campaigns in dashboard metrics option in Setup › Preferences. Custom campaign data appears based on the send date of each email: if the selected interval only partially covers a campaign, you'll see only the portion of data that falls within the period.
The Click Rate Over Time chart
The main chart shows the trend of Click Rate over the selected period, that is, clicks relative to opened emails (the on-screen title is "Click rate (clicks / opened emails)"). A Weekly / Monthly toggle changes the detail between weekly and monthly data points.
A declining line indicates the program is working; an isolated spike usually signals that a more insidious simulation was introduced, not a deterioration.
The indicators (Simulation Rates)
Below the chart, four panels summarize the selected period.
| Indicator | What it shows |
|---|---|
| Simulations Sent | Number of simulation emails sent during the period. The panel allows you to download a CSV with details of all simulations. |
| Open Rate | Share of sent emails that were opened (estimated for Microsoft — see below). |
| Click Rate | Clicked emails relative to opened emails. |
| Report Rate | Reported emails relative to opened emails. |
How to read the percentages. Click Rate and Report Rate are calculated on opened emails, not sent ones: the percentage measures how many of the people who actually saw the email fell for it (Click Rate) or reported it (Report Rate).
Why values are approximate for Outlook users. Outlook (Microsoft) blocks the tracking pixel used to detect email opens. For these mailboxes, the number of opened emails cannot be measured and is estimated (averaging about 73% of sent emails). As a result, the Open Rate — and all percentages that depend on opens — are approximate for Microsoft users: it's better to observe the trend over time rather than the absolute value.
Compromising Actions
The Compromising Actions donut chart shows the distribution of types of risky actions taken by employees in simulations. There are four categories:
- Credentials — entry of credentials on a simulated login page.
- Attachments — opening an attachment.
- Downloads — downloading a file.
- Permissions — granting permissions (for example to an application).
The same employee can appear in multiple categories if they performed multiple actions. The chart helps you understand which type of attack is most effective, so you can calibrate your next campaign.
Risk distribution
Some panels show how resilience is distributed across your employee population.
Click Rate by Seniority
Reports the average Click Rate by tenure, divided into four non-overlapping bands: 0–3 months, 3–6 months, 6–9 months, and 9+ months. On screen the labels appear as "< 3 / < 6 / < 9 / > 9", but each is its own band, not a cumulative total: for example "< 6" indicates the 3–6 months band. Tenure is counted from when the 2nd simulation was sent to the employee; the first one (sent during the initial trial phase) is not counted.
Users per level
A semi-donut groups employees by their level of phishing resilience, calculated over the last 6 months. Pay attention to the direction of the scale:
- Beginner — most at risk: Click Rate equal to or above 20%.
- Intermediate — Click Rate below 20%.
- Expert — most resilient: 0%, they have never clicked a simulation.
Only employees with at least one opened simulation are classified; those who haven't opened any do not appear in the three levels. The level is recalculated each time based on the last 6 months and is not archived: it is therefore not possible to extract "the list of all Beginners".
Click rate by department and by location
Two bar charts rank Click Rate by department (Click rate by department) and by location (Click rate by location), to identify segments where you should focus training. The location chart appears only when at least one employee has a location assigned: if it's missing, the chart is not shown.
The Data per User table and exports
The Data per User table drills down to individual employees. Each row shows name, email, and the counts Sent, Opened, Reported, Clicked, plus details of compromising actions (credentials / attachments / downloads / permissions). In the table you can:
- search for an employee by name or email;
- sort on multiple criteria with Add Sort;
- expand a row to see the simulations received by that employee and open the detail of the individual email;
- download the table as CSV with Export users (one summary row per employee).
From the Simulations Sent panel you can also download the complete CSV with details of all simulations.
For a single simulation the platform assigns only one status, chosen by priority: Reported (reported before or without a click), then Opened (opened without a click), then Learned (completed the micro-learning), then Clicked, finally Sent. A report that arrives after a click remains classified as Clicked.
Data privacy
The chart, indicators, and segment charts are aggregated values at the company level. The Data per User table, individual email details, and CSV exports are instead per individual employee: they show names, emails, department, and counts of interaction and compromise, to plan targeted training. The Dashboard does not introduce new external providers: it reads simulation data already present on the platform. In simulations with a login page, only that an employee entered data is recorded, never the username or password typed.