Understanding phishing results and performance

This article explains how to read and interpret phishing results in Stoïk Protect, at the campaign, company, and employee levels.

Once a phishing campaign is launched, employee interactions are tracked automatically and displayed throughout the phishing module.

Global company performance overview

Company results provide a global view of phishing performance across all campaigns.

All percentages are calculated based on the number of phishing emails sent.

• Open rate: % of emails opened

• Click rate: % of emails clicked

• Submitted rate: % of emails where information was submitted

• Coverage: % of employees who received at least one phishing email during the selected period

You can click on each metric to display its evolution on the performance graph over time.

Use the date picker to adjust the time range and analyze a specific period.

Campaign-level results

Campaign results give you a detailed view of how employees interacted with a specific phishing campaign.

Phishing email funnel

For each campaign, you can track the progression of emails through the phishing funnel:

• Emails sent

• Emails opened

• Links clicked

• Credentials submitted

Use the date picker to analyze the funnel over a specific period.

You can also click on any metric to filter and view the emails that reached that step of the funnel.

Campaign email list

Below the funnel, you can view a table listing all phishing emails sent as part of the campaign.

For each email, you can see key information such as:

• Interaction status

• Recipient

• Date sent

• Template and scenario

This table allows you to quickly scan campaign activity and filter results.

Email details

By clicking on an email, you can access its full details, including:

• Date and time sent

• Template and scenario used, with a preview

• Sender

• Language

• Interaction history (opened, clicked, etc.)

This level of detail provides full transparency into how each phishing email was handled.

Global employees risk overview

Global employees results provide a global view of risk exposure within your organization.

Each employee is associated with a criticality level, based on their interactions with phishing simulations over time.

Definition of risk levels

TBD

Employee-level results

Employee-level results help you understand how a specific employee interacted with phishing simulations across campaigns. They provide context on individual exposure and behavior over time.

Employee phishing funnel

For each employee, you can track the progression of emails through the phishing funnel:

• Emails sent

• Emails opened

• Links clicked

• Credentials submitted

Use the date picker to analyze the funnel over a specific period.

You can also click on any metric to filter and view the emails that reached that step of the funnel.

Employee email list

Below the funnel, you can view a table listing all phishing emails sent to this employee.

For each email, you can see key information such as:

• Interaction status

• Campaign name

• Date sent

• Template and scenario

This table allows you to quickly scan employee activity and filter results.

Email details

By clicking on an email, you can access its full details, including:

• Date and time sent

• Template and scenario used, with a preview

• Sender

• Language

• Interaction history (opened, clicked, etc.)

This level of detail provides full transparency into how each phishing email was handled.