Phishing simulations that reflect how attackers actually target Indonesia

Claro's campaign wizard walks you through the same steps a real phishing test requires: pick a template, choose or clone a landing page, select targets, and set a schedule, all inside a campaign state machine that moves cleanly through draft, scheduled, running, paused, and completed. Behind the wizard, a queue of delayed jobs sends each email with throttling, a defined send window, and randomized jitter, so a thousand-person campaign does not land in every inbox at the same second the way a bulk mail blast would.

Templates come from a GrapeJS-based email builder with variable substitution, backed by a growing library of 30+ localized templates across six categories, including sets built specifically for Indonesian shipping and government scenarios. When a campaign needs a matching landing page, the built-in cloner uses a headless browser to reproduce a real login page and capture any credentials a recipient submits. Before anything sends, a preflight check validates the template, landing page, recipient list, sending domain, and schedule, and flags issues like an approaching warmup limit or a template with no tracked link.