Sublime Security Launches Tailored Phishing Simulations and Training

Sublime reduces human risk by using the attacks detected in each customer's environment to deliver tailored simulations and provide immediate training on the signals employees miss.

WASHINGTON, Oct. 6, 2026 /PRNewswire/ -- Sublime Security, the agentic email security platform, announced the general availability of Sublime Tailored Phishing Simulations and Training. Sublime uses attacks detected in each customer's environment to generate and prioritize phishing simulations, then delivers immediate, attack-specific training when an employee clicks. Security teams prepare employees in the same platform that protects their email, using the threats it already detects.

Many phishing programs operate separately from email security, adding another console and workflow for teams to manage. They often rely on generic templates, leaving teams to manually recreate attacks when they want more relevant and timely tests. When an employee clicks, the training that follows is often generic and disconnected from the email they just encountered.

"AI has given attackers the ability to launch convincing, highly targeted phishing campaigns at a speed and scale that generic, once-a-quarter training can't keep up with," said Josh Kamdjou, CEO and co-founder of Sublime Security. "The best phishing tests reflect the attacks your employees are most likely to see next, and your email security platform should already have visibility into those threats. Sublime uses what it detects in each environment to tailor simulations and deliver immediate training, so security teams can prepare employees for real threats in the same platform they rely on to stop them."

Sublime's Tailored Phishing Simulations and Training puts customers' detection data to work and enables them to:

• Build simulation campaigns around what's targeting employees now: Sublime ranks simulation templates by the attack techniques that are most active and most recently seen in each organization's mail flow. Teams can also use AI to turn a malicious email detected by Sublime into a simulation in minutes, or generate one from a scenario they define.
• Deliver training the moment an employee fails a phishing test: When an employee clicks a simulation, Sublime delivers training while the experience is still fresh. Using the same email, the training highlights the signals to recognize next time and can include a knowledge check and organization-specific context.
• Understand where the organization is most vulnerable: Campaign reporting brings together open, click, report, and training completion rates across simulation campaigns. Teams can track trends by group and attack type and compare failure, success, and completion rates over time.

Tailored Phishing Simulations and Training runs in the same console Sublime customers already use for email security. Simulations reach Microsoft 365 and Google Workspace inboxes through direct API injection, avoiding the friction of allowlisting or transport rules. Because Sublime both sends the simulations and protects the inbox, reports of simulated emails stay out of the security team's queue.

"Long-form, generic security training has consistently struggled with uptake. We wanted something shorter and more immediate, delivered at the moment people need it, not another module they'll put off. Sublime's approach gives us that, and it suits how our colleagues engage with learning," said Chris Payne, Group Head of Cyber & Infrastructure at Goodwood.

Tailored Phishing Simulations and Training is available now as an add-on to Sublime Email Security for organizations using Microsoft 365 and Google Workspace. Setup requires no MX record changes. Learn more at https://sublime.security/product/phishing-simulations-training or request a demo at https://sublime.security/demo.

About Sublime Security

Sublime stops more email attacks with less work. Our autonomous platform protects inbound, internal, and outbound email while continuously expanding organization-specific detection coverage without vendor bottlenecks. AI agents triage messages and generate new detections, with full transparency and control when needed. Learn more at https://sublime.security.

SOURCE Sublime Security