AfriPhish Documentation

Welcome to the AfriPhish docs. AfriPhish is a multi-tenant Human Risk Management (HRM) platform built for African organisations — it combines phishing simulations, security-awareness training, human-risk scoring, and real-time coaching, fully localized in English, French and Arabic (with right-to-left Arabic support).

Where to start

• Quickstart — create your organisation and run your first simulation in an afternoon.
• Core concepts — organisations, users, campaigns, training, and risk scores.
• Admin guide — the day-to-day of running the platform.

Run your programme

• Phishing & training — simulations, the template library, and remedial training.
• Campaign Builder — drag-and-drop a fully custom phishing email (Enterprise).
• WhatsApp Companion Nudge — a link-free, pretext-matched WhatsApp message alongside a phishing email.
• Bring Your Own WhatsApp Sender — send nudges from your own verified WhatsApp number.
• IT & Security training — advanced courses for IT engineers and SecOps.
• Coaching & interventions — nudge and retrain risky users automatically.
• Policies & attestation — publish policies and collect e-signatures.
• Reports & compliance — dashboards, exports, and audit evidence.

For administrators

• Roles & access (RBAC) — grant and revoke admin access safely.
• Plans & entitlements — what each tier unlocks and how limits are enforced.
• MFA & account security — two-factor auth and the platform security policy.
• Branding & org logo — put your logo on reports and policies.

For engineers

• Integrations — SSO, SCIM, LMS connectors, telemetry, and Clerk auth.
• Email & deliverability — SMTP and dedicated sending domains.
• Automation & scheduling — scheduled campaigns, reminders, and digests.
• API reference — authenticate and call the REST API.

New here? The fastest path is the Quickstart — it walks you through the guided onboarding wizard end to end.