X-Phish™managed phishing simulation & training
DAG Tech X-Phish™ sends your employees realistic phishing emails, trains anyone who falls for one, and reports how your risk changes over time. It runs continuously, managed by a DAG Tech cybersecurity specialist.
A phishing program, not a phishing test
X-Phish is DAG Tech's managed phishing simulation and awareness training service. Phishing remains one of the most common ways attackers get in, because it targets people instead of systems.
X-Phish sends employees simulated phishing emails modeled on real attacker techniques, gives anyone who clicks short training on what they missed, and measures how susceptibility changes across departments.
Phishing tests for employees, done right
What is a phishing simulation?
A phishing simulation is a safe, fake phishing email sent to employees to see who clicks, who reports it and who ignores it. It measures real risk without real damage, and teaches people to spot the signs.
How do you run a phishing test for employees?
Send a realistic baseline email, measure clicks and reports, train anyone who clicks right away, then repeat with new tactics. X-Phish runs that cycle continuously, managed by a DAG Tech specialist.
Phishing simulation vs. phishing training?
Training teaches the warning signs; simulation tests whether people use them. Effective programs combine both, which is why X-Phish triggers short training the moment someone clicks.
Annual test vs the X-Phish way
One test, then nothing
- ✕A single yearly test people forget
- ✕Generic training nobody remembers
- ✕No idea which departments are at risk
- ✕No trend to show leadership
Practice that keeps people sharp
- ✓Campaigns run continuously
- ✓Training right after a click
- ✓Results by user and department
- ✓Reports that show risk falling
Simulate, teach, measure, repeat
tailored to your industry
by user and department
signs they missed
Measure today's risk
A first campaign shows who clicks, reports or ignores a phish.
Run real-world campaigns
Emails tailored to your industry and the threats you face.
Teach in the moment
Anyone who clicks gets short training on the signs they missed.
Track the trend
Results by user and department, reviewed with our specialist.
A simulated phish, and what the report shows
The tactics real attackers use
Simulations replicate the techniques behind real phishing attacks, customized to your organization.
Spear phishing
Targeted emails using names, roles and vendors from your business.
Credential harvesting
Fake Microsoft 365 and Google login pages.
Malicious attachments
Simulated invoices and shared files that should never be opened.
Industry templates
Scenarios built for your sector, from wire requests to portal notices.
Landing pages
Realistic pages that show users what they would have given away.
Social engineering
Urgency, authority and curiosity hooks that push people to act fast.
Which DAG Tech plans include X-Phish?
Phishing simulation and security awareness training are included in the A+ Animal™ plan, and X-Phish is also available on its own. It is not part of Diamond IT™ Pro or Base.
Diamond IT™ Pro & Base
Add X-Phish standalone, or upgrade to A+ Animal™.
X-Phish™ only
Keep your current IT provider and add a managed phishing program.
Request X-Phish™ →Phishing simulation questions, answered
What is X-Phish™?
X-Phish is DAG Tech's managed phishing simulation and security awareness training service. It sends employees realistic simulated phishing emails, trains anyone who clicks, and reports how risk changes by department over time.
What is a phishing simulation service?
A phishing simulation service runs phishing tests for you: designing campaigns, sending them, assigning training and reporting results. With X-Phish, a DAG Tech cybersecurity specialist manages every campaign.
How often should you run phishing tests?
Continuously, rather than once a year. Regular simulations with varied tactics keep employees alert and show whether training is working. X-Phish runs ongoing campaigns for every user.
What happens when an employee clicks a simulated phish?
They land on a page explaining it was a simulation and are assigned short training on the warning signs they missed. The result is recorded in the company phishing report.
What types of phishing does X-Phish simulate?
Spear phishing, credential harvesting with fake login pages, malicious attachments, industry-specific scenarios and social engineering hooks such as false urgency and authority.
Is a phishing simulation the same as a phishing assessment?
A phishing assessment is usually a one-time test of current risk. X-Phish starts with that baseline assessment, then keeps simulating and training so the risk keeps falling.
What does the phishing report include?
Click and report rates, susceptibility by user and department, simulation engagement and training completion, reviewed with a DAG Tech specialist.
Is X-Phish included in A+ Animal?
Yes. Phishing simulation and security awareness training are included for every A+ Animal™ user, and X-Phish is also available on its own.
Request IT services
Turn your team into a human firewall
Tell us about your team. Our team reviews every request and follows up with next steps.
- ✓A baseline campaign first
- ✓Training right after a click
- ✓Reports by department
Sent with your request: X-Phish
Phishing simulation with X-Phish™ by DAG Tech
Phishing simulation is how X-Phish™ measures and lowers your risk. X-Phish is DAG Tech’s managed phishing simulation and security awareness training service. Every user gets regular fake phishing emails that copy real attacker tricks. In addition, a DAG Tech cybersecurity specialist designs and runs each campaign.
What is a phishing simulation?
A phishing simulation is a safe, fake phishing email. It shows who clicks, who reports it and who ignores it. That way, you measure real risk without real damage. Training teaches the warning signs, while simulation tests whether people use them. That is why X-Phish triggers short training the moment someone clicks. Also, a one-time phishing assessment only shows today’s risk. In contrast, X-Phish starts with that baseline and keeps going.
How the program works
First, a baseline campaign shows who clicks, reports or ignores a phish. Then ongoing campaigns use spear phishing, fake login pages, malicious attachments and industry templates. They also use social engineering hooks such as false urgency. Next, anyone who clicks lands on a page that explains the test. After that, they get short training on the signs they missed. NIST lists the same signs in its small business guidance on phishing.
Reporting that shows risk falling
A company phishing report tracks click and report rates, risk by user and department, and training completion over time. You review it with a DAG Tech specialist. Because the phishing simulation runs all year instead of once, you can see whether training works.
How to get X-Phish
DAG Tech includes X-Phish for every user in the A+ Animal™ managed IT plan. In addition, you can buy it on its own and keep your current IT provider. We also run Managed Cybersecurity and the X-SOC™ managed SOC. So, ready to see your baseline? Request IT services to start a phishing simulation.
Reviewed by DAG Tech engineering · Updated November 2026