Human-focused cybersecurity platform that simulates phishing attacks to measure and improve employee security awareness.
Phishing Minds is a cybersecurity awareness platform designed to simulate real-world phishing attacks inside organizations.
The system allows companies to launch controlled phishing campaigns to test employee behavior, identify vulnerabilities, and improve their internal security culture.
Unlike traditional security tools that focus only on infrastructure, Phishing Minds focuses on the human factor, which is responsible for the majority of successful cyberattacks.
- Identify which employees or departments are most vulnerable to phishing
- Measure real security awareness
- Provide data-driven insights for managers
- Improve organizational cybersecurity culture
Phishing Minds was designed as a multi-tenant SaaS platform, meaning multiple companies can use the system independently.
Each company has:
- its own employees
- departments
- phishing campaigns
- dashboards
- statistics
The platform allows administrators to create and schedule phishing campaigns.
Features include:
- Custom phishing email templates
- Dynamic template parameters
- Campaign scheduling
- Department targeting
- Company-wide campaigns
Example phishing parameters:
{{EmployeeName}}
{{CompanyName}}
{{FakeLoginLink}}
{{ManagerName}}
Phishing Minds tracks how users interact with phishing emails.
The system records events such as:
- 📬 Email opened
- 🔗 Link clicked
- 🔐 Credentials submitted
- 🚩 Phishing reported
These interactions are used to calculate security risk metrics.
The platform generates rankings such as:
- Most secure departments
- Most vulnerable teams
- Users who frequently fall for phishing attacks
This creates a gamified security awareness culture within organizations.
Managers and executives have access to a PowerBI-style dashboard showing:
- phishing campaign results
- department risk levels
- user vulnerability statistics
- overall company security score
This helps leadership understand human cybersecurity risk in real time.
Phishing Minds is structured as a modern web platform.
Example architecture:
Frontend (Dashboard)
│
▼
Backend API
│
▼
MySQL Database
│
▼
Phishing Campaign Engine
│
▼
Email Delivery System
The platform includes entities such as:
- Companies
- Employees
- Departments
- Campaigns
- Phishing Templates
- Behavioral Tracking
- Email Credentials
- Subscription Plans
This structure supports scalable enterprise deployments.
Example technologies used in the project:
Backend
- .NET / ASP.NET
Database
- MySQL
Frontend
- Web dashboard
Email Engine
- SMTP campaign delivery
Over 90% of cyberattacks start with social engineering.
Phishing Minds helps organizations move from reactive security to proactive human risk management.
Instead of asking:
"Are our systems secure?"
Companies can now ask:
"Are our people prepared?"
Planned improvements:
- AI-generated phishing scenarios
- Social engineering simulations
- Security awareness scoring system
- Attack scenario generator
- Automated training recommendations
Developed by Bruno Mazetto, Gustavo Delinski, Helen Bonato e Letícia Fabri
Information Systems Student
Software Developer
This project is open-source and available under the MIT License.
⭐ If you like this project, consider giving it a star :D