Menu

2026

PhishSim

Phishing simulation and security awareness training platform for organizations.

Role
Designed and built (solo)
Year
2026
Stack
Next.js 15 · TypeScript · Supabase Auth · PostgreSQL · Drizzle ORM · shadcn/ui · Tailwind v4

Live site (opens in a new tab)Repository (opens in a new tab)

How it works

  1. Set up an organization

    Complete onboarding and import employees from a CSV.

  2. Run a campaign

    Create a phishing simulation, with optional AI-generated campaign content.

  3. Review tracked events

    Follow campaign events using data stored in the organization's database.

Overview

PhishSim is a platform for running phishing simulations and security-awareness training inside an organization. I designed and built it solo.

Problem

A team needs a place to practice spotting phishing without handing that process to a tool it does not control.

Solution

The app lets an organization onboard, import employees, and run campaigns. Results stay in that organization’s own database.

Key features

  • Organization onboarding wizard
  • Employee import from a CSV
  • Campaigns with event tracking
  • Optional AI-generated campaign content

Security notes

Route protection sits in middleware. Database access stays on the server and is not exposed to the browser.

Outcome

The live app can take an organization from onboarding through a tracked campaign. The controls above are the ones I actually built. I am not claiming a formal security audit.