Frequently Asked Questions

What is a phishing simulation?

In a phishing simulation, we send realistic fake phishing emails to your employees, exactly like real cybercriminals do. We measure who clicks on links, who enters credentials, and who reports the email as suspicious. The goal is not to catch people out, but to identify vulnerabilities before a real attacker does.

Is a phishing simulation legal?

Yes, provided it is conducted under a formal agreement. Every CoBoo simulation is documented in a written contract between you and us. This legally protects both you and your employees. We never conduct a simulation without explicit written authorization from the client.

How long does a phishing simulation campaign last?

A standard phishing simulation runs for 2 to 4 weeks. During this period, emails are sent in phases, giving you a representative picture of security awareness across your organization. After the campaign, you receive a detailed report with findings and recommendations.

Which organizations are your services suitable for?

CoBoo works with businesses of all sizes, from small SMEs to larger organisations. We work extensively with companies in Drenthe, Groningen, Friesland, and Overijssel, and across the Netherlands.

What does a phishing simulation cost?

The cost of a phishing simulation depends on a number of factors:

• Organisation size: the number of employees taking part in the campaign
• Number of scenarios: from a single scenario to several parallel attack types
• Campaign duration: typically 2 to 4 weeks; a longer run gives a more representative picture
• Level of reporting: a basic report with click rates, or an extensive management summary per department
• One-off or recurring: an annual programme with several simulations costs less per round

CoBoo always works with a fixed project price, so you know exactly where you stand in advance. This includes the intake conversation, the full campaign and the final report. Get in touch for a tailored, no-obligation price indication.

What is the difference between CoBoo and Lumyo Awareness?

CoBoo focuses on testing: we measure how vulnerable your employees are to phishing through realistic simulations. Lumyo Awareness focuses on training: interactive e-learning modules that teach employees to recognize threats. The two complement each other perfectly, gain insight with CoBoo, then train targeted with Lumyo.