What is BullPhish ID?

It’s estimated that nearly 90% of security breaches result from human error. This highlights the importance of empowering employees with the knowledge and awareness needed to recognize and avoid cyber threats.

BullPhish ID provides an easy-to-use platform that combines security awareness training with realistic phishing simulations to reduce cyber risks caused by human error. The platform helps organizations strengthen their security culture, meet compliance requirements, and support cyber insurance eligibility through ongoing employee education.

BullPhish ID consists of two main modules:

  • Training & Awareness: The Training & Awareness module offers a wide range of engaging courses that cover essential cybersecurity topics — including data protection, password security, phishing awareness, and compliance best practices. These courses make it easy to deliver ongoing, effective security awareness training to employees.
  • Phishing Simulation: The Phishing Simulation module allows organizations to send realistic, simulated phishing emails to employees. It helps evaluate user responses to potential threats, identify areas for improvement, and reinforce safe email practices through hands-on learning.

Key platform functionality

  • Create automated training and phishing campaigns that make it easy to manage employee education. A campaign is a training course(s) or phishing simulation(s) assigned to a specific group(s) that is scheduled for and run during a specific time frame.
  • Choose from an extensive number of security training courses and phishing kits. New content is added regularly to address the current threat landscape.
  • Customize existing content like training courses, phishing kits, and email templates. Or, create custom content.
  • Generate reports and analyze information including training course completion data, phishing campaign results (e.g., number of employees that clicked a phishing link), and where employee improvement is needed.
  • Integrate BullPhish ID with a directory resource such as Microsoft Azure or Google Workspace to easily synchronize data and keep it up to date.

Organization types

BullPhish ID is designed for three types of organizations:

  • Managed Service Provider (MSP): An MSP is a third-party company that remotely manages a customer's information technology (IT) infrastructure and end user systems. MSPs often provide these services to multiple privately owned businesses.
  • Mid-Market Enterprise (MME): An MME is a third-party company that remotely manages a customer's information technology (IT) infrastructure and end user systems. MMEs often provide these services to multiple privately owned businesses.
  • Small and Medium-Sized Business (SMB): An SMB is a privately owned business. A business with 100 or fewer employees is a small-sized business while one with 100-999 employees is considered a medium-sized business.

MSP and MME organizations often manage BullPhish ID tasks for their client SMBs. This includes creating phishing and training campaigns as well as creating groups and adding targets, who are the employees for which the campaigns are sent.

However, each SMB is able to perform these tasks for their own organization.

NOTE  For a description of the BullPhish ID user roles and their associated permissions, see the article BullPhish ID user roles.

 

Revision Date
Edited intro paragraphs. 12/1/25