Human phishing defense solutions startup PhishMe, Inc. has today announced the release of Simulator Small Business Edition (SBE), a scaled version of its Simulator solution that conditions employee security behavior to identify and deflect phishing attacks through proven, immersive education processes.

Unlike many security firms, PhishMe offers an education service that aims to head of phishing attacks when they are received versus when they are acted on, where staff are trained to be aware of phishing threats through an education platform that mimics (hence the name Simulator) real-life spear phishing attacks and then provides instant learning opportunities for those who fall for the simulated attacks.

The platform includes an expanded number of pre-built templates that emulate the latest tactics and techniques used by attackers that are updated continuously based on threat intelligence feeds, feedback from customers, and information collated by PhishMe’s internal research team.

Simulator SBE is offered as a Software-as-a-Solution (SaaS) application that is easy to deploy and that on top of providing experience and education seeks to provide conditioning for employees so they become the first line of defense against phishing attacks, retaining security information on the company before other forms of phishing defense tools kick in.

“Phishing attacks are a problem for organizations of all sizes,” PhishMe Chief Operating Officer explains Jim Hansen said in a statement sent to SiliconANGLE. “In fact, 38 percent of spear phishing attacks target companies with under 250 employees because, rightly or wrongly, attackers often assume smaller organizations lack the advanced technology of large enterprises.”

“The human element behind attacks is the reason the technology approach to security is failing. The attacker, a human, is constantly inventing new ways to penetrate your existing security stack,” he added. “To launch an effective defense, you have to fight fire with fire. Or in this case, human with human, and engage your entire employee base in the war against phishing attacks.”

For company trainers or owners, the reporting dashboard for the service provides company performance metrics as well as details about each employee’s review and response, allowing users to track the effectiveness of the training over time, and identify susceptible employees.

Clever idea

While we cover many great security firms here at SiliconANGLE, both startups and long-established firms, many of which offer great products, dealing with security in both large enterprises and SME’s should be a multi-layered approach that attempts deal with the attack vectors wherever they may come from, and how to deal with them once they occur.

PhishMe is looking at heading off Phishing attacks at the pass, so to speak, by providing a cloud-based SaaS tool that delivers training directly to employees so that in theory those employees will know how to detect a spear phishing attack, and not to be deceived by them.

No solution is perfect, but if PhishMe’s education service improves phishing attacks detection by any significant percentage, it has to be of assistance in the overall view of cyber security in the workplace.

Based in Leesburg, VA, PhishMe has raised $15.5 million to date with backing from Paladin Capital Group and Aldrich Capital Partners.

Image credit: kleuske/Flickr/CC by 2.0