Moxso

Adaptive phishing simulations that reshape themselves around each employee's risk

Intermediate
Screenshot of Moxso, Adaptive phishing simulations that reshape themselves around each employee's risk

What is Moxso?

Moxso is an AI simulation generator tool. Moxso runs phishing simulations that adapt to each employee's behaviour, adjusting difficulty, frequency and targeting based on clicks, reports and ignored messages. It covers email, SMS, voice, WhatsApp, QR code and web channels, with spear phishing scenarios, an AI-assisted template builder and follow-up training tied to risk.

Moxso is a phishing simulation platform built around a simple premise: a click, a report or a silent ignore should change what happens next. Every interaction an employee has with a simulated attack feeds a live risk profile. Click a credential harvesting link and the profile updates, a harder scenario gets queued, and the difficulty climbs. Report the email and testing pressure eases off. Ignore the message entirely and the system adjusts which scenario types get sent. The result is a training programme that reacts to behaviour instead of running a fixed calendar of generic tests. The product covers more than inbox drills. Simulations can be dispatched by email, SMS, voice call, WhatsApp, QR code and web, so organisations can see how staff react to requests arriving on a phone or through a scanned code rather than only in Outlook. For roles exposed to targeted social engineering, Moxso offers spear phishing scenarios covering executive impersonation, credential theft and lookalike software notifications, with recognisable signals such as an urgency window or a deceptive sender highlighted in the scenario design. Custom templates can be generated with AI assistance from a short description of the scenario, and built-in language options include English, Danish, German, Norwegian and Swedish. The tool is aimed at security teams, IT administrators and compliance leads in mid-sized and larger organisations who need continuous testing rather than an annual exercise. Custom simulations run through the same scheduling and follow-up logic as the built-in library, and responses feed the same risk profiles, so bespoke scenarios do not sit in a separate workflow. Moxso positions itself as part of a broader platform that also covers training, risk scoring and reporting, which means follow-up learning can be triggered by simulation outcomes rather than assigned manually. Reporting integrates with Outlook and Gmail so that employees can flag simulated emails using the same reporting button they use for real ones, which keeps the test closer to genuine working conditions.

How do you use Moxso?

  1. 1Book a demo and scope the programme
    Start by requesting a demo with the Moxso team. Use the session to describe your headcount, the roles that face targeted attacks and which channels you want to test.
    Moxso — Book a demo and scope the programme
  2. 2Connect email reporting
    Install the reporting integration for your mail platform so employees can flag simulated messages through the same button they use for real phishing.
    Moxso — Connect email reporting
  3. 3Review how interactions update risk
    Walk through the signal model: clicks raise difficulty, reports reduce pressure and ignored messages shift scenario type. Confirm how these map onto your employee groups.
    Moxso — Review how interactions update risk
  4. 4Set targeting and channel mix
    Decide which groups receive email, SMS, voice, WhatsApp, QR code or web scenarios, and how aggressively frequency should scale for higher-risk profiles.
  5. 5Build a custom template
    Use the AI-assisted builder to draft a scenario around tools and requests your staff actually see. Review the wording and add translations before scheduling it.
  6. 6Link simulations to follow-up training
    Turn on follow-up learning so employees who interact with a simulation receive training matched to the risk they showed, then review results over the first few cycles.
    Moxso — Link simulations to follow-up training

Pros and cons

Pros

  • Risk profiles update from clicks, reports and ignored messages, so later scenarios change rather than repeatAI
  • Simulations span email, SMS, voice, WhatsApp, QR code and web, covering channels beyond the inboxAI
  • Spear phishing scenarios address executive impersonation and business email compromise for high-value rolesAI
  • AI-assisted builder drafts custom templates that run through the same scheduling and risk logic as the libraryAI
  • Outlook and Gmail reporting integrations let staff flag simulated emails with their normal reporting habitAI

Cons

  • The site does not publish pricing tiers or plan limits, so budgeting requires a sales conversationAI
  • No free tier or self-serve trial is advertised; the primary entry point is booking a demoAI
  • Effectiveness depends on configuring risk profiles and targeting well, which assumes security admin timeAI
  • Scenario library depth and the number of supported languages are not fully documented on the simulation pageAI
  • Little public detail on reporting exports and how evidence maps to specific compliance frameworksAI

How much does Moxso cost?

Support

Support is handled through the Moxso team, with a demo booking route on the simulation page; no help centre or documentation portal is listed on the site pages provided.

Integrations

Reporting add-ins for Microsoft Outlook and Google Gmail let employees flag simulated phishing emails through their existing reporting workflow.

Learn more

Features

Adaptive targeting adjusts simulation frequency, difficulty and audience from live risk profiles. Channels include email, SMS, voice, WhatsApp, QR code and web. Spear phishing scenarios cover executive impersonation and credential theft, an AI-assisted builder drafts custom templates in English, Danish, German, Norwegian and Swedish, and responses feed the same profiles used for follow-up training.

Learn more

Frequently asked questions about Moxso

  • How do you use Moxso?
    The walkthrough on this page covers 6 steps: 1. Book a demo and scope the programme 2. Connect email reporting 3. Review how interactions update risk 4. Set targeting and channel mix 5. Build a custom template 6. Link simulations to follow-up training.
  • What platforms does Moxso support?
    Moxso is available on Web App.
  • What does Moxso integrate with?
    Reporting add-ins for Microsoft Outlook and Google Gmail let employees flag simulated phishing emails through their existing reporting workflow.
  • What are the limitations of Moxso?
    The site does not publish pricing tiers or plan limits, so budgeting requires a sales conversation. No free tier or self-serve trial is advertised; the primary entry point is booking a demo. Effectiveness depends on configuring risk profiles and targeting well, which assumes security admin time.

Status

StatusActive
Views0
Outbound clicks0
Added10/21/2026

Platforms

Web App

Pricing

Paid