ScamDrill

About ScamDrill

ScamDrill runs safe, realistic scam simulations against the people a security-awareness vendor normally ignores — a grandparent, a teenager, a four-person business — and then teaches from what they clicked. The mechanism is the one corporate phishing training uses: send a convincing fake, measure whether it was clicked or reported, and deliver the lesson at the moment the mistake is fresh, when it actually lands. What is different is the audience and the price floor. A family plan covers a handful of learners with email and SMS drills across the full scam library; organisation plans extend the same engine to small businesses, schools, healthcare clinics, banks and nonprofits, with white-labelling that strips ScamDrill branding so simulations read as internal training. Around the drills sits a free tool layer that doubles as acquisition and as genuine utility: an AI email scam checker, an SMS scam checker, a phishing link checker that resolves where a link really goes without clicking it, a scam IQ quiz, a live feed of scams currently circulating, a plain-English fraud glossary, and an I've-Been-Scammed flow producing a tailored action plan. Compliance reporting is included on every organisation tier — simulation delivery records, click rates, report rates, risk scores and annual training completion, exportable as CSV for SOC 2, ISO 27001 or HIPAA. Onboarding is deliberately frictionless: the full family plan runs free for fourteen days with no card, and lapses to the free plan rather than auto-charging.

Key Features

Tags