Simulation overview metrics
Click rate
Definition
Percent of emails successfully sent where the user clicked on an element in the email.
Calculation
Click count / Sent mails count
Impact
A high Base Click Rate suggests that employees are still prone to phishing attempts, indicating a need for further training. A decreasing trend in this metric demonstrates improved awareness and reduced risk exposure.
Interaction rate
Definition
Certain simulated phishing emails direct the user to a landing page when the user clicks on a link. This metric marks the percent of these emails where a user interacted with the landing page compared to the overall number of this type of email that was sent and clicked.
Calculation
Interaction count / Landing page visit count
Impact
This metric measures how often users engage with phishing landing pages after clicking a simulated phishing email. A high rate may indicate curiosity or a lack of awareness, while a declining rate suggests increasing skepticism and awareness.
Reply rate
Definition
Percentage of emails successfully sent where the user replied to the email.
Calculation
Reply count / Sent mails count
Impact
Replying to phishing emails is a significant risk factor, as it indicates susceptibility to social engineering attacks. A high Base Reply Rate highlights potential vulnerabilities and the need for targeted security awareness training on phishing mail threats.
Reporting rate
Definition
Percentage of emails successfully sent where the user reported the email using the Phishing Report Button.
Reported external emails
The count of emails reported via the Phishing Report Button that were not part of a SoSafe simulation campaign.
Calculation
Reported count / Sent mails count
Impact
A higher Base Reporting Rate indicates strong employee awareness and proactive threat identification. An increase in this metric suggests that users are effectively recognizing and reporting phishing attempts, contributing to overall organizational security.
Open rate
Definition
Percent of emails successfully sent where the user downloaded the tracking pixel in the email.
Calculation
Open count / Sent mails count
Impact
A high Base Open Rate suggests that employees are opening phishing emails, potentially increasing the risk of compromise. Monitoring this metric helps determine if users are becoming more cautious about unsolicited emails over time.
Share of emails sent
Definition
The percentage of all emails planned in the campaign that have actually been sent
Error rate
The percentage and number of sent emails that were rejected by the mail server.
Calculation
Emails sent / Emails planned in campaign
Impact
Think of this as your campaign progress. If you’re at 0%, no simulated phishing mails have been sent as part of your selected campaign. The error rate is helpful to determine if there might be an issue with your Whitelisting settings or other technical issues.
Mobile rate
Definition
Percentage of emails clicked where the user was on a mobile device.
Calculation
Mobile count / Click count
Impact
This metric helps assess how often users interact with phishing emails on mobile devices, which may pose additional risks due to limited security controls (e.g., lack of email previews or URL visibility). A high rate suggests that security training should emphasize mobile-based phishing risks.
Learning rate
Definition
Certain simulated phishing emails direct the user to learn more about phishing when the user clicks on a link. This metric marks the percent of these emails where a user visited the learning page and clicked at least two explanatory texts, compared to the overall number of this type of email that was sent and clicked.
Calculation
Learning count / Learning page visit count
Impact
A higher Base Learning Rate indicates that users who engage with phishing emails are taking the opportunity to educate themselves and engaging with the learning content, leading to improved long-term awareness. A low rate suggests a need to optimize training visibility and engagement strategies.
Overview Metrics – Multiple Clients / Multiple Tenants Behavior
For all Overview metrics, the calculation for Multiple Clients and Tenants combines events from all included campaigns. Total counts will therefore be the sum of all individual campaign accounts, and the rates will be the division of the combined sums.
User group breakdown
This chart provides an overview of the most important metrics (click rate, interaction rate, reporting rate and open rate) broken down by your user groups. You can use the filter at the top to only look at specific user groups and also change the sorting in the dropdown right next to it.
Impact
This chart is a powerful tool to help you figure out which departments need to improve in which area. Use this information to address specific weaknesses in your security culture.
click to see the full-size screenshot
Overview Metrics – Multiple clients / Multiple tenants behavior
For all Overview metrics, the calculation for multiple clients and tenants combines events from all included campaigns. Total counts will therefore be the sum of all individual campaign accounts, and the rates will be the division of the combined sums.