What is your primary use case for Gophish?

My main use case for Gophish is to run a phishing awareness campaign inside an organization in a safe and controlled way. For example, instead of waiting for a real attacker to send a fake email to employees, the company can simulate a phishing email using Gophish. The email may look legitimate or resemble a login alert, password reset request, an invoice, an HR notice, or a document sharing link. The goal is not to blame employees; the goal is to understand how many people may click the suspicious link and enter credentials or report the email to the security team. Based on the results, the company can train employees better to reduce their risk of a real phishing attack. Gophish helps the security team create an email template, landing pages, user groups, and campaigns, and it also shows useful reports such as who opened the email, who clicked the link, and who submitted the information. In simple terms, Gophish is the tool that helps the organization test employee awareness before the real attackers do. In my recent campaign, we created a controlled email that looked like an internal password expiry notification. This message informed employees that their password was about to expire and asked them to click the link and verify their account. Some employees clicked it. Using Gophish, we created the email templates, added the target user groups, and connected to safe landing pages. The landing pages did not collect the real password; they were only used to track awareness and show training guidance. After sending the campaign, Gophish helped us measure how many users opened the email, clicked the link, and submitted the details. Based on the results, we identified which department needed more phishing awareness training. The main purpose was not to blame anyone; it was to understand employee behavior, reduce phishing risk, and help the company prepare better against a real attack. One challenge I faced was the credential awareness simulation. We set up a phishing campaign where employees received an email that looked like a password expiry or account verification message. The landing page was only for awareness testing; we did not collect the real password or sensitive data. The outcome was useful because it showed which user or team is more likely to fall for phishing. Gophish is very useful because it turns security awareness into a practical exercise. Instead of just telling employees about phishing, we can safely show them how phishing works and help them learn from real-world style scenarios.

I used Gophish for a project last August, a phishing attack simulation, and I reused it recently because a student found the project I did on GitHub and wanted to do the same project, so he asked me some questions, and I reused it at that time. My main use case for Gophish is in a phishing attack simulation project where the idea is to learn and understand social engineering and how to simulate phishing attacks when you're in a Red Team. I also created a slide deck that explains how to recognize a phishing attack, showing some of the results of the three campaigns, and then at the end, I provided some advice to people to avoid falling for those kinds of phishing attacks.

My main use case for Gophish is for employee awareness within the company, and I use it for phishing campaigns.I create emails to raise employee awareness and send them to see if employees end up clicking. If they click, I reach out to them after finishing the campaign and conduct awareness work so they do not fall for phishing. I configure Gophish within our Office 365 and proceed with the campaigns, sending emails similar to Microsoft's, emails similar to service providers', and I analyze the results. If someone falls for it, I then handle awareness together with that person.

My main use case for Gophish is phishing campaigns. A quick specific example of how I use Gophish for phishing campaigns is for security awareness and training. I use it for tracking responses, ratings, and also analyze statistics regarding my main use case.

My main use case for Gophish is for penetration testing on cybersecurity with phishing links and others. We used Gophish to test the mindset of different users in the company. We used Gophish to send intrusion links and links by email, for example, links supposedly from sites they visit or related to their Facebook or Instagram account. We determined the number of people who clicked on the link, those who reported it before clicking on the link, and those who did not click on the link. It was a survey campaign that we conducted after an awareness session that we carried out with the different users of the company.

I have been using Gophish for a year. My main use case for Gophish is awareness campaigns for staff. A specific example of how I use Gophish in a campaign for staff is that I create fake internal-use pages and send them to collaborators' emails to see if they fall for the tests.

I use Gophish to run fake awareness campaigns with our clients. Everything is framed and I use the product to send emails, get reporting, and then present the results afterward. The objective of the campaign I carried out with Gophish was to determine the level of maturity of employees and staff. So the goal is to send an email to everyone and see the percentage of people who fall into the trap. We analyze the results of these campaigns by going back with the same data but for different companies to see whether the alerts are being followed.

My main use case for Gophish is sending phishing emails. The main benefit of using Gophish in phishing campaigns is the monitoring panel because sending emails by other methods already exists through other tools. The ease of configuration and the visual feedback in the tool is what makes me want to use Gophish.

My main use case for Gophish is red team engagements. During a red team engagement, we use Gophish to host the landing pages and send the emails for social engineering engagements. It tracks the progress of the social engineering engagement, including who has clicked what, who has entered what, and it also sends out the emails with custom templates for us.

I am using Gophish for awareness training for my employees in my company. My main use case for Gophish is because it is easy to set up, easy to use, and very user-friendly.