The tier for regulated organizations or a large surface
Enterprise is for teams that no longer debate whether a program exists: they debate evidence, internal brand, and an exercise the catalog does not run on its own. You get everything in Growth. You get up to eight custom simulations, twelve branded pieces, one Advanced Attack with retest in the year, and two cybersecurity talks. You get access to professional services when the quota is not enough.
What a year looks like on Enterprise
Besides roster and contact, you gather rules already cited, what the board expects to see, and brand rules. Without that, branded work slips and the Advanced Attack is designed blind. The milestone calendar —not only campaigns— is confirmed at kickoff.
The year writes down: up to eight custom, twelve branded pieces, one Advanced Attack with retest, two talks. They are ordered so the advanced exercise is not stacked on a leadership talk in the same week. You mark silence windows. The analyst holds the rest of the catalog cadence.
Custom simulations and production of the twelve pieces start. Legal or communications often join to validate brand. Each custom send still has notice to the contact. If the roster adds a country or a brand, explicit notice is required before that identity is used on a piece.
Once in the year an Advanced Attack is designed and run: a scenario the platform does not fire alone. Then there is a retest. It is not a perimeter pentest. It is a human-factor exercise with a read and a second pass. The concrete month is confirmed in the plan.
What you get: platform, service and content
Platform
The full product, same as Smart and Growth. The extra quota does not change the engine: it changes what can be fired and measured on top. Integrations, the agent, analytics, and native evidence stay…
Service
Everything in Growth —analyst, annual plan, operations, follow-up, custom— plus one Advanced Attack with retest (once in the year) and two cybersecurity talks. The analyst puts those milestones on…
Content
Up to eight custom simulations and a package of twelve branded pieces: the program looks like it belongs in-house, not like a catalog with the logo swapped. Custom phishing follows the same brief as…
If surface, regulation, or brand need more
Enterprise is for regulated organizations or a large surface
The CISO needs to take evolution to the board. Compliance needs evidence that the program exists and is operated. People needs the content not to feel like a global pack with a logo stuck on. The…
It also fits teams that already know they will ask for depth outside
The plan includes one Advanced Attack with retest in the year —an exercise designed, run, and measured again— and two cybersecurity talks. The rest of the professional catalog —smishing, vishing…
It is not the plan if you are starting the first formal program and the
That is Smart. It is not the plan if the only ceiling is the realism of six custom phishing simulations. That is Growth. Enterprise is justified when the surface, the rule, or the brand asks for the…
What Enterprise does not include
What you get: platform, service and content
Platform Service Content
What Enterprise does not include
Enterprise does not include an unlimited professional catalog. It includes one Advanced Attack with retest and two talks. Smishing, vishing, deepfake, USB… It also does not include becoming the SOC, monitoring the perimeter, or using the index for disciplinary purposes. The analyst operates the program with you…
A large surface, a program that can be audited
Banco del Sol ran awareness with good attendance and still watched phishing-driven incidents grow. The team needed to stop measuring course attendance and start measuring behavior, with evidence for audit and…
Questions about Enterprise
Does the surface already ask for Enterprise?
Bring the rule you cite, the roster, and which milestone —branded, Advanced Attack, talk— has to land in year one.