Templates

What is a phishing template?

A phishing template is a simulated phishing email that can be sent to employees as part of a campaign. Each template defines the email content (subject, body) and a redirection page that employees are taken to if they click the link.

Prebuilt templates

Stoïk provides a library of prebuilt phishing templates that cover common real-world attack patterns (fake login pages, document sharing, password reset requests, etc.). These are available to all Protect users out of the box and are regularly updated.

You can browse prebuilt templates from Simulations > Templates > Prebuilt.

Custom templates

In addition to prebuilt templates, you can create your own phishing emails from scratch. This allows you to:

• Simulate targeted, context-aware phishing scenarios specific to your industry or organisation

• Test employees against emerging threats not yet covered by the prebuilt library

• Keep employees engaged by introducing fresh, unexpected email patterns

• Attach files (e.g. fake invoice, HR document) to reproduce attachment-based phishing.

Custom templates appear alongside prebuilt templates when creating a campaign.

You can manage custom templates from Simulations > Templates > Custom templates.

Using templates in campaigns

When creating a phishing campaign, you can select any combination of prebuilt and custom templates. For prebuilt templates, translations are provided automatically — each employee receives the email in their language. For custom templates, each template is created in a single language and will only be sent to employees who speak that language.