FedPhishDrill

FedPhishDrill is a web app (with optional mobile companion) for government agencies to design, run, and audit phishing simulations that align to federal requirements. It focuses on operational realism: templates based on common gov workflows (procurement, HR, travel, IT tickets), controlled delivery windows, and role-based targeting without exposing sensitive directories. The platform produces audit-ready evidence: campaign configuration, user outcomes, remediation actions, and training attestations mapped to NIST 800-53 and agency policy. It includes a lightweight AI assistant to draft scenario text, translate to multiple reading levels, and generate after-action reports—while keeping all content in a tenant-isolated environment. The goal is not “more training,” but measurable reduction in click/credential rates and faster reporting behavior. It’s built for constrained environments and procurement realities: clear pricing tiers, exportable data, and minimal integration requirements.