Quickstart

This guide takes you from zero to your first phishing simulation.

1. Create your organisation

Head to the app and start the guided onboarding wizard. It has four steps:

  1. Account — your name, work email, and a password. This becomes the first IT Admin.
  2. Organisation — name, country, industry, and employee count (your seat cap).
  3. Invite users — seed teammate emails; they'll receive an invitation to set a password.
  4. Setup training — choose training tracks and, optionally, launch a first phishing test.

When you finish, your organisation is created on a 14-day free trial (up to 25 employees) and you're dropped straight into the dashboard, signed in.

Every new organisation starts on the Trial plan. See Plans & entitlements for what's included and how to upgrade.

2. Add your people

You can grow your directory three ways:

  • Invite individuals from Users → Add → Add User.
  • Import a CSV of employees (Users → Add → Import users from CSV).
  • Automatic provisioning via SCIM from your identity provider (Pro and up) — see Integrations.

Seats are enforced against your plan: once you hit your cap, new invites and SCIM provisioning are blocked until you upgrade or deactivate someone.

3. Launch a phishing simulation

From Phishing → New Campaign, the six-step wizard takes you through it:

  1. Pick a template from the library of 17 families / 337 localized variants (EN/FR/AR) and an attack type (link, credential page, attachment, reply-to, or QR).
  2. Choose your recipients, language (defaults to your app locale), and whether to send now or schedule.
  3. Preview the exact email and victim landing page, then launch.

As recipients interact, AfriPhish records the full funnel: email opened → link clicked → attachment opened → credentials submitted → reported. Anyone who's caught can be auto-enrolled in remedial training. See Phishing & training for the full detail.

4. Watch risk fall

The Risk dashboard turns activity into a per-person and per-department human-risk score. Use it to target coaching where it matters, and the Reports section to export evidence for leadership and auditors.

Next: Core concepts to understand how the pieces fit together.