The Template Catalog is the library of phishing email templates that a company can send with Phishing Simulation. It collects ready-made LibraCyber templates and custom templates created by the company, and for each simulation it shows the employee a landing page explaining what they missed. You can access it from the left menu via Phishing Simulation > Template Catalog and it is reserved for administrators: employees only receive simulations and never open the catalog.
LibraCyber templates and custom templates
The catalog contains two types of templates, with different usage rules.
| Aspect | LibraCyber templates | Custom templates |
|---|---|---|
| Origin | Curated by LibraCyber and shared with all companies | Created by the company |
| Editability | Not directly editable; Copy & Edit creates a copy | Editable |
| Usage | Can be used as-is in campaigns | Can only be used in Custom Campaign campaigns, not in automated campaigns |
With Copy & Edit you duplicate a LibraCyber template into an editable custom template, without ever altering the original.
Anatomy of a template
Each template consists of two levels. The template itself contains what does not change from one language to another: the name, the brands being imitated, and the payload type, which is the action it seeks to trigger. Attached to it is a localized version for each language, with the subject, sender, email content, an optional impersonated role (CEO, CFO, CPO, HR, Sales Director, or IT Manager), and a scenario with a login page or a demo banner.
Payload types
The payload indicates the action that the template tests.
| Payload | What it verifies |
|---|---|
| Credentials | The employee is directed to a realistic login page and prompted to enter username and password. |
| Attachments | The employee is prompted to open an attachment. |
| Downloads | The employee is prompted to download a file. |
| Permissions | The employee is prompted to grant an access or permission request. |
| None (click only) | Only detects whether the employee clicked the link. |
Personalization variables
The subject, sender, and body of a template can contain variables that the platform replaces for each recipient and each company, so the email appears written specifically for that person. The variables available to the administrator are:
-
Recipient:
user_firstname,user_lastname,user_email -
Company:
company_name,company_signature -
Key people:
ceo_firstname/ceo_lastname,cfo_firstname/cfo_lastname,cpo_firstname/cpo_lastname,hr_firstname/hr_lastname,sales_director_firstname/sales_director_lastname,it_manager_firstname/it_manager_lastname -
Key customer:
key_customer_name,key_customer_domain -
Date:
date,date_now
The values of key people, signature, and key customer come from the company profile filled in Company Scan; if a field is not filled in, the corresponding variable remains empty. The platform automatically inserts and manages the tracking link and detection pixel in every template.
Landing pages and login scenarios
When an employee clicks the link in a simulation, one of two things can happen.
- Scenario with login page — for a Credentials-type template, a realistic-looking login page. If the employee fills it out, the simulation is marked as compromised. Only the fact of submission is recorded: never the username or password entered.
- Educational page — in other cases, a page explaining that it was a simulation and what to watch out for next time.
A template can be directed to a specific landing page among those available.
The "Detected in the Wild" chip
Some LibraCyber templates display the Detected in the Wild chip: it indicates a template built from a real phishing email. The chip is the same for all companies and reflects the origin of the template, not the company's data. When copying a template of this type, the chip is not retained.
Catalog filters
The filter bar narrows down the list of templates shown:
- Search — search by keyword.
- Tags — brand or topic.
- Payload — type of attack.
- Activation Status — All / Active / Blocked / Not included.
- Available in — language in which the template is available.
- Display — All / Recommended audit templates / Templates currently selected / Custom templates / Detected in the Wild.
Activation status
In the detail panel of each template, the Activated toggle enables or disables the template for the company. The corresponding status is reported by the Activation Status filter:
- Active — candidate for simulations.
- Blocked — selected but individually disabled.
- Not included — not selected for the company.
A deactivated template immediately exits automated campaigns.
Creating and adapting templates
From the catalog header an administrator can build a new custom template with Create template, or describe the desired email and have the platform draft it with Create template with AI: the AI merely proposes content that the administrator reviews and modifies, and makes no decisions about individual employees. The Send to myself button sends a test copy of the template to your address to verify how it looks before use.
Template Attribution
Template Attribution establishes which templates the company actually sends, assigning them to departments. It opens as a Company Scan tab (and is also available in Setup) and requires the Company Scan permission. From here you choose which templates feed the company's simulation program.