attacksimulator.com

What It Is

ATTACK Simulator is a cybersecurity awareness training platform for organizations. Its core approach is to train employees to recognize common threats such as social engineering, phishing, and malware through automated phishing email simulations, ransomware simulations, and interactive courses. According to its website, it has served more than 1,300 companies, trained over 53,000 employees, and delivered more than 245,000 simulations. Its positioning focuses on “reducing human risk” and “building a security culture.”

Core Capabilities and Management

In terms of protection category, this is not a traditional gateway or endpoint security product; it focuses primarily on training human behavior. Its capabilities include phishing security audits, long-term phishing simulations, ransomware scenario experiences, course-based learning, and automated reminder emails. On the management side, it provides user reporting and behavior analytics. Higher-tier plans include custom email attacks, an education platform, multiple administrators, user groups, Active Directory integration, an ATS API, and phishing alert buttons for Outlook/Gmail, making it easier for companies to incorporate employee reporting into day-to-day security operations.

Pricing and Plans

The official website lists four tiers: Evaluation, Essentials, Pro, and Enterprise. Evaluation is suitable for basic audits; Essentials targets small and mid-sized businesses with limited budgets that want to establish a minimum security-awareness baseline; Pro adds the education platform, custom simulations, and multiple administrators, with an emphasis on compliance and behavior change; Enterprise provides the full feature set, including AD, API, and email reporting plugins, making it suitable for large enterprises. Training periods include 3, 6, 12, and 24 months, but specific pricing is not disclosed and requires requesting a quote. A free trial/security audit is also available, allowing organizations to obtain an initial report first.

Pros and Cons

Its strengths are a clear product path, with options ranging from one-off assessments to long-term security culture building; coverage of phishing, ransomware, remote-work security, and certification preparation; and relatively complete integration capabilities in the Enterprise tier. Limitations include the lack of publicly disclosed pricing, data residency details, payment methods, and specific compliance certification names. Its compliance positioning is more about “supporting certification preparation” and should not be treated as equivalent to already holding a particular certification.

Who It’s For and Access from China

ATTACK Simulator is suitable for private companies, public-sector organizations, remote teams, and mid-to-large organizations that want to reduce employee click risk through continuous drills. Access from mainland China, payment methods, and localization support are not specified in the available materials and should be verified through testing and quotation. If local compliance, Chinese-language content, or in-country service response is important, it may be worth evaluating KnowBe4, Proofpoint, Cofense, as well as local security training/phishing simulation solutions from Qi-AnXin, NSFOCUS, DBAPPSecurity, and others.