Incident detection statistics

0 %
In controlled phishing tests, up to 92% of users open the message, and 30–50% click on a malicious link (Proofpoint, KnowBe4). In phone-based tests (vishing), the success rate of obtaining information reaches 60–70%.
0 %
Not all clients immediately implement recommendations after tests—an estimated 60–70% take action right away, while the rest do so within a few months or… not at all (according to auditing firms' experience).
0 %
Impersonation of others (e.g., HR, IT, coworkers) in phishing tests is effective in about 40–60% of cases—depending on the industry and employee awareness level (Verizon DBIR 2024, IBM).
0 %
In most cases (70–85%), the information needed to prepare an effective attack is found online (LinkedIn, company websites, social media, online CVs).