Employees who recognise a fake e-mail, and know what to do next.
Who Phished is
Phished is a Belgian company from Leuven, founded in 2019 by Arnout Van de Meulebroucke. It makes fully automated phishing training. In 2024 the Flemish Welvaartsfonds invested 7.5 million euro. According to Phished, 2 million people at more than 7,100 organisations use the platform today.
Why this is needed
Most attacks start with an e-mail: a fake invoice, a parcel that could not be delivered, a password about to expire. Technical filters stop many of them, but never all. What gets through depends on the person who clicks.
An annual training does little. What works is practising regularly in a safe environment.
What Phished does
Realistic simulations, automatically
Phished sends your employees a personalised, simulated phishing e-mail at random moments. Whoever clicks immediately gets a short explanation of what was wrong. Nobody has to schedule anything.
Short lessons in the Phished Academy
Short lessons of a few minutes on phishing and other digital risks. According to Phished, more than 1.5 million users are enrolled, with an average rating of 4.7 out of 5.
A report button in the mailbox
Employees report a suspicious e-mail with one click. That teaches them to pay attention, and gives you a quick signal when a real attack comes in.
Insight into the risk
In the advanced version, a risk score tracks how resilient your organisation is and where extra attention is needed.
Where your data is kept
Phished is certified to ISO 27001:2022 and SOC 2. For European customers, data is processed in Belgium.
Why we work with Phished
- It works on its own: no campaigns we have to set up each time.
- It teaches people something, instead of catching them out.
- A Belgian company, with European customers’ data in Belgium.
- It helps with the training NIS2 asks for. See GDPR and NIS2 in plain language.
How Q-Ware uses Phished
We set up the platform for all your employees and follow up on the results. What we see, we use to fine-tune the rest of the security. See Security.
Frequently asked questions
Do employees not feel watched?
The aim is learning, not punishment. Whoever clicks gets an explanation, not a telling-off. In the reports we look at departments and trends, not at individuals.
How often do employees get a simulation?
On a regular rhythm, spread over the year and at random moments, so it becomes a habit without getting in the way.
Phished is a trademark of Phished BV. Facts updated on 2 October 2026.
How resilient are your people?
A first campaign quickly gives a picture. We are happy to discuss what that would look like for you.