Phishing simulation and security awareness

The human layer protected
with phishing simulation and continuous training

Sentria tests and trains your employees with simulated phishing campaigns and automated micro-learning. Department metrics, maturity scores and compliance reports — all integrated with Vertip Secure Mail.

Automated campaignsAdaptive micro-learningNative Vertip integration
Sentria — Awareness Dashboard
Campaign: March 2026

Sent

2.847

Click rate

4.2%

Report rate

68%

Trained

94%

Financeiro2.1% clickA
Comercial6.8% clickB
RH8.3% clickC
TI1.2% clickA+

Simulation

realistic phishing campaigns

Micro-learning

adaptive training by profile

By department

granular maturity metrics

Compliance

audit-ready reports

For organizations that treat the human factor as a defense layer

FinanceGovernmentHealthcareEducationIndustryServices

The problem

Technology protects the perimeter. Who protects the employee?

Firewalls, gateways and antivirus block technical threats. But when phishing gets through — and eventually it does — the decision is in the hands of whoever receives the email.

One wrong click compromises everything

91% of corporate attacks start with an email. A single employee clicking a malicious link can compromise credentials, install malware or authorize a fraudulent transfer.

Annual training doesn't change behavior

Yearly talks and security PDFs don't build reflexes. Employees forget within weeks. Without repeated, contextualized practice, knowledge doesn't translate into behavior.

No metrics, no visibility

Most organizations don't know which department is most vulnerable, who would click on phishing or whether previous training had any effect. Without data, there's no way to prioritize or improve.

Regulations require awareness evidence

GDPR, ISO 27001 and sector regulations require documented awareness programs. Without a platform, the organization cannot generate audit evidence.

The solution

Simulation + training + metrics in one platform

Sentria combines simulated phishing campaigns with automated training. Those who fail the simulation receive immediate micro-learning. Department metrics measure the real evolution of maturity.

  • Simulated phishing campaigns with realistic, customizable templates
  • Automatic micro-learning triggered by simulation behavior
  • Maturity metrics by department, role and business unit
  • Organizational resilience score with time-based trends
  • Compliance reports for GDPR, ISO 27001 and audits
  • Native integration with Vertip — real threat data feeds simulations
Request technical assessment
01

Campaign planning

Templates, department segmentation, scheduling

02

Simulation delivery

Simulated phishing delivered via SMTP with tracking

03

Metrics collection

Who opened, clicked, reported or ignored

04

Automated training

Immediate micro-learning for those who failed

05

Maturity report

Score by department, trends and compliance

Integrations

Microsoft 365Google WorkspaceActive DirectorySMTPAPI REST

Benefits

What changes with continuous awareness

Employees who recognize threats. Departments that improve month over month. Evidence that survives the audit.

Simulations that truly test

Templates based on real threats — including Vertip data. Each campaign is contextualized for the organization's sector and profile.

Training that changes behavior

Micro-learning triggered at the right moment — right after the simulation failure. Short, direct content contextualized for the attack type.

Metrics that show progress

Dashboard with click rate, report rate, score by department and time-based trends. The organization sees whether the investment is working.

Measurable risk reduction

Organizations that simulate phishing regularly reduce click rates by up to 75% within 12 months. Real data, not estimates.

Scalable security culture

From 50 to 50,000 employees. Segmentation by department, role, branch. Each group receives campaigns and training suited to their risk profile.

Documented compliance

Periodic reports with simulation evidence, training participation and maturity evolution. Ready for GDPR, ISO 27001 and audits.

Who is Sentria for

If your employees receive email,
your organization needs Sentria

Sentria serves any organization where email is a work channel. If an employee can click on phishing and cause an incident, the organization needs continuous simulation and training.

Companies with many employees

Organizations with hundreds or thousands of email accounts that need a structured awareness program.

Financial sector

Banks, fintechs and insurers with high exposure to BEC, fraud and regulatory training requirements.

Healthcare and hospitals

Environments with sensitive patient data and high staff turnover. Continuous training against phishing and social engineering.

Education and universities

Thousands of accounts with diverse profiles. Students, faculty and staff with different levels of digital maturity.

Retail and e-commerce

Commercial and operational teams frequently targeted by brand phishing and credential compromise.

Industry and manufacturing

Employees in OT/IT environments exposed to ransomware via email and targeted social engineering.

Providers and MSSPs

Partners offering awareness as a service to their clients. Multi-tenant model with centralized management.

Compliance-driven organizations

Companies that need to document awareness programs for GDPR, ISO 27001, PCI-DSS or audits.

Features

Everything security awareness requires in one platform

From simulation to report. From click to training. Every feature designed to change behavior.

Simulated phishing campaigns

Realistic templates with per-organization customization. Scheduling, segmentation and full tracking.

Adaptive micro-learning

Short training modules triggered automatically by simulation behavior. Content by attack type.

Maturity dashboard

Resilience score by department, role and unit. Time-based trends and cross-campaign comparisons.

Group segmentation

Differentiated campaigns by department, hierarchy level or risk profile. Each group gets what it needs.

Templates based on real threats

Integration with Vertip: blocked threats become simulation templates. Training reflects reality.

Report button

Email plugin to report phishing. Measures report rate — the most important maturity indicator.

Compliance reports

Simulation evidence, participation and evolution for GDPR, ISO 27001, sector regulations and audits.

API and integrations

REST API for integration with SIEM, SOAR and HR platforms. Webhooks for campaign events.

Architecture

How Sentria integrates with security operations

SaaS platform that sends simulations via proprietary infrastructure, collects metrics and triggers training — all integrated with Vertip's real protection.

Inputs

Employees

Import via CSV, AD or API

Templates

Library + custom

Vertip data

Real blocked threats

Policies

Segmentation and frequency

Platform

Sentria

Awareness Platform

Campaign planning
Simulation delivery
Interaction tracking
Training triggering
Score calculation
Report generation
SIEM integration
SaaSMulti-tenant

Outputs

Maturity score

Per department and global

Training delivered

Micro-learning completed

Compliance reports

GDPR, ISO 27001, audits

Alerts and webhooks

Events for SIEM/SOAR

Platform

Designed for organizations of any size

From 50 to 50,000 employees. Segmented campaigns, adaptive training and granular metrics that scale without operational complexity.

Scalable

from 50 to 50,000+ employees

Automated

recurring campaigns and training

Integrated

Vertip, AD, SIEM, SOAR

Auditable

compliance evidence

FeatureSentriaManual training
Phishing simulation with realistic templates
Behavior-triggered micro-learning
Real-time department metrics
Maturity score with time-based trends
Templates fed by real threats (Vertip)
Automated compliance reports
Email-integrated report button
Training documentation for audits

FAQ

Frequently asked questions

Does Sentria send real phishing?

No. Sentria sends simulations — emails that mimic real phishing but contain no malicious payload. The goal is to measure behavior and trigger training, not cause harm.

How does the Vertip integration work?

Real threats blocked by Vertip feed Sentria's template library. Simulations reflect what is actually attacking the organization, making training more relevant.

Is micro-learning mandatory?

Configurable. The administrator defines whether training is triggered automatically, whether it's mandatory and the completion deadline. Reports show participation and completion.

Does it work with Microsoft 365 and Google Workspace?

Yes. Sentria sends simulations via proprietary infrastructure (SMTP) and integrates with directories (AD, Google Directory) for employee import and segmentation.

How do department metrics work?

Each campaign generates click, report and training completion data by department, role and unit. The dashboard shows maturity score and trends over time.

Are the reports suitable for compliance?

Yes. Reports with simulation evidence, training participation and maturity evolution. Compatible with GDPR, ISO 27001 and sector regulations.

How do I start using Sentria?

Contact us for a technical assessment. We size the program based on employee count, current maturity and compliance requirements.

Ready to turn your employees into the first line of defense?

Our team sizes the ideal awareness program for your organization — from the first simulation to the compliance report.