The Landing pages are the pages a user "lands" on after clicking the link contained in a phishing simulation. They can have a purely educational purpose (explaining the mistake made and showing the clues for recognising the attack) or simulate a real page — for example a fake login screen — to check whether the user goes as far as entering their own data.
Where they are and who can manage them
Landing pages are managed from the left-hand menu, under Training Material > Landing.
Management is available to users with the Company Admin role or higher (MSP):
- an MSP user can access both global landing pages and those specific to individual companies;
- a Company Admin user can only access the landing pages of their own company.
In the list you can switch between the card view and the table view, use the Object filter (Global and Company / Global / Company) and the search bar.
Creating a landing page
From the list, click the Add button and fill in the required fields.
Description of the fields to fill in
| Field | Description |
| Name | The name used to identify the landing page in the platform (mandatory). |
| Language | The first language the page is created for (mandatory). Further languages can be added later. |
| Company | The company to associate the landing page with. Leaving the value on Global (an option available only to those with the relevant permissions) makes the page usable by all companies; selecting a specific company reserves it for that organisation. |
On saving, the platform generates a basic HTML page and opens the landing page straight away in management mode, ready to be customised.
Editing the content (Preview tab)
Managing a landing page is organised into four tabs. The Preview tab is the one where you work on the actual content.
- Available languages: selects the language version to work on.
- Content / Preview button: switches between the HTML editor (with line numbers) and the rendered preview of the page.
- Save: saves the content of the selected language.
- Delete version: removes the version in the current language. The operation is irreversible and is available only when more than one language exists.
NOTE: in the HTML body you can use some placeholders that the platform replaces automatically, including:
-
{{.Top4HintsAsHtml}}— automatically inserts, as a list, the hints shown to the user. Hints are not configured on the landing page: they come from the Hints section of the associated phishing template (the first 4 in priority order are inserted). To manage them, see the article "Creating and Testing a Custom Template"; -
{{.BaseURL}}— the base URL, useful for linking static resources (images, for example).
Renaming and managing languages (Details tab)
In the Details tab:
- Global Information: lets you change the Name of the landing page (remember to click Save).
- Add a new language version: select one of the available languages and click Add. An empty version will be created in that language, to be filled in from the Preview tab.
NOTE — Which version the user sees: the platform shows the version in the user's language; if that language is not available, it falls back in order to the company default language, then to English and finally to the first available version. It is therefore advisable to prepare at least the main language of the recipients (or the company default language) and, as a safety net, an English version.
Assignment and advanced settings
Settings tab — lets you assign the landing page as the default for one or more companies, by ticking the relevant boxes.
Advanced tab:
- Capture submitted data: when enabled, the platform records any data the user submits on the landing page (useful with pages that simulate a login form). This makes it possible to track not only the click on the link, but also the actual entry of the information.
- Redirect to URL (appears when data capture is enabled): after the data is submitted, redirects the user to a real URL, to avoid raising suspicion.
- Copy Landing Page to a Company: duplicates the current landing page to another company (or as global), useful for reusing a ready-made layout.
NOTE: in this version only the submitted data is recorded; passwords are not stored.
Before using it in a campaign
- Always check the result with the Preview before associating the landing page with a template or a campaign.
- Remember to click Save after every change, so you do not lose your work.
- A landing page can be called from a phishing template through the
{{.URL}}placeholder: if none is specified in the template, the default one is used.