# PhishSheriff

> PhishSheriff is a platform focused on Human Risk Management and Email Trust
> Intelligence. It brings together phishing simulation, security awareness,
> behavioural intelligence and email trust insights to help organisations
> understand risk and prioritise action. Website: https://phishsheriff.com

This file follows the llms.txt format, an emerging convention for giving
language models a curated map of a website. It is not a universally supported
standard. Last reviewed: 18 October 2026.

PhishSheriff has two product families. The Human Risk Platform covers phishing
and voice simulation, security awareness training and human risk reporting,
including the Human Risk Score. Email Trust Center covers DMARC monitoring,
email sender discovery, the Domain Trust Score and executive impersonation
monitoring.

## Full brief

- [PhishSheriff brief](https://phishsheriff.com/phishsheriff.md): A plain-language overview of what PhishSheriff does, its products, contacts and common questions.

## Core pages

- [Platform overview](https://phishsheriff.com/platform): How phishing simulation, awareness, human risk insights and email trust monitoring fit together.
- [Products](https://phishsheriff.com/products): The Human Risk Platform and Email Trust Center.
- [Solutions](https://phishsheriff.com/solutions): Phishing readiness, payment-request verification, human risk, email-domain trust and reporting to leadership.
- [About](https://phishsheriff.com/about): Why PhishSheriff was built and how it approaches human risk.
- [Book a demo](https://phishsheriff.com/book-demo): Request a walkthrough focused on your priorities.
- [Contact](https://phishsheriff.com/contact): Sales, support and general enquiries.

## Human Risk Platform

- [AI Phishing Simulation](https://phishsheriff.com/products/ai-phishing-simulation): Phishing exercises that reflect workplace requests, used to assess responses and guide awareness.
- [AIVA — AI Voice Phishing Simulation](https://phishsheriff.com/products/aiva-vishing): Controlled voice phishing exercises to assess responses to suspicious calls.
- [Multi-Channel Simulator](https://phishsheriff.com/products/multi-channel-simulator): Social engineering exercises across the channels available in a deployment.
- [Awareness Training](https://phishsheriff.com/products/awareness-training): Training built around employee behaviour: recognise threats, verify unusual requests and report concerns.
- [Human Risk Analytics](https://phishsheriff.com/products/human-risk-analytics): The Human Risk Score and reporting on how responses change over time.

## Email Trust Center

- [Email Trust Center](https://phishsheriff.com/products/etcc): Review email authentication, understand sending sources and investigate domain-trust risks.
- [DMARC Monitoring](https://phishsheriff.com/products/real-time-dmarc): Monitor DMARC alignment, investigate failures and plan a controlled path towards enforcement.
- [Email Asset Discovery](https://phishsheriff.com/products/email-asset-discovery): Identify the services sending email for your domains.
- [Domain Trust Score](https://phishsheriff.com/products/domain-trust-score): A 0–100 starting point for investigating email-domain risk.
- [Executive Protection](https://phishsheriff.com/products/executive-protection): Review potential impersonation activity involving leadership and brand.

## Guides

- [Practical guidance on human risk and email trust](https://phishsheriff.com/resources): All guides and analysis.
- [From p=none to p=reject: a DMARC playbook](https://phishsheriff.com/resources/dmarc-playbook-p-none-to-p-reject): A staged path to DMARC enforcement.
- [How we calculate the Human Risk Score](https://phishsheriff.com/resources/how-we-calculate-the-human-risk-score): The principles behind the score and how to read it.
- [CalPhishing: calendar-invite credential theft](https://phishsheriff.com/resources/calphishing-calendar-invite-attacks): How meeting-booking links and internal forwards are used to steal Microsoft 365 credentials.
- [Claude AI phishing scams](https://phishsheriff.com/resources/claude-ai-phishing-google-account-scams): How a fake AI-subscription giveaway used browser-in-the-browser phishing against Google accounts.
- [Google Ads tech support scams](https://phishsheriff.com/resources/google-ads-tech-support-scams-fake-security-alerts): How malicious ads and fake security alerts push people to call fraudulent support numbers.
- [Financial sector phishing trends 2026](https://phishsheriff.com/resources/financial-sector-phishing-trends-2026): Brand impersonation, phishing-as-a-service and AI-enabled attacks against financial institutions.
- [Cybersecurity tabletop exercises](https://phishsheriff.com/resources/cybersecurity-tabletop-exercises): How to plan and run an exercise that tests people, processes and decisions.

## Optional

- [Cyber Awareness Month 2026](https://phishsheriff.com/october): Four weekly themes, four browser-based security games, a downloadable month kit, a five-step plan and 10 ideas for security leaders.
- [Security](https://phishsheriff.com/security): How PhishSheriff approaches security.
- [Privacy Policy](https://phishsheriff.com/privacy): How personal data is collected, used and protected.
- [For AI agents](https://phishsheriff.com/about/for-ai-agents): A page explaining this file and the full brief.