Fallax Reviews

Fallax Description

Fallax conducts internal phishing tests within your Google Workspace or Microsoft 365 tenant, providing instant training to users who click on simulated threats and generating evidence for audits.

These simulations are directly inserted into mailboxes within your tenant, eliminating the need for a sending domain, which means there’s no requirement for SPF, DKIM, or DMARC configurations, thus preserving your email reputation. When users click on a phishing link, they are directed to a brief training page. The scheduling of these simulations is tailored to each individual and is automatically adjusted based on their previous interactions, following set rules for pacing and limits.

A single export can demonstrate compliance with standards such as ISO 27001, SOC 2, NIS2, DORA, PCI DSS, HIPAA, GDPR Article 32, and NIST CSF, and it seamlessly integrates with Vanta, Drata, Secureframe, and Sprinto.

Additionally, Fallax features automated phishing reports sourced through an Outlook or Gmail add-on, identifies popular applications that employees use, provides departmental performance standings, and offers a REST API along with an MCP server for added functionality.

The service is hosted in the EU and strictly adheres to GDPR regulations, ensuring that submitted credentials are never stored. To encourage usage, the first ten user seats are free indefinitely. Moreover, this comprehensive approach not only enhances security awareness but also bolsters your organization’s overall cybersecurity posture.