← All projects
Project record01 mention
Originally shared on Hacker News

Fallax

Fallax is a phishing simulation platform for companies. Instead of sending simulated phishing emails, it injects them directly into mailboxes via the Microsoft 365 or Google Workspace API, so no allowlisting in spam filters is needed and tests aren't silently blocked. Results feed into compliance platforms like Vanta and Drata as security training evidence.

Last shared For companies
01 / The problem

What it addresses

Most phishing simulation tools send emails that get blocked by spam filters or require allowlisting, so tests can silently fail to reach employees.

02 / Source history

Shared over time

Each entry reflects what was shared on that date. Details may have changed since then.

  1. Fallax

    Fallax is a phishing simulation platform for companies. Instead of sending simulated phishing emails, it injects them directly into mailboxes via the Microsoft 365 or Google Workspace API, so no allowlisting in spam filters is needed and tests aren't silently blocked. Results feed into compliance platforms like Vanta and Drata as security training evidence.

    Problem: Most phishing simulation tools send emails that get blocked by spam filters or require allowlisting, so tests can silently fail to reach employees.

    Audience: companies

    Posted by @Nebulic · Original comment ↗

    “Working on Fallax (https://fallax.io), phishing simulations for companies. The difference with most tools is we don't send the mails, we inject them directly in the mailbox via the Microsoft 365 or Google Workspace API. So no allowlisting in the spam filter, and no tests that silently get blocked.”