Directory + delivery
Microsoft 365
Sync users and groups from the tenant, and deliver simulations straight to the inbox through Microsoft Graph.
Early access for MSPsTurn caution
Turn caution
into instinct.
Phishing tests and training for every client you manage, delivered straight to the inbox on Microsoft 365 and Google Workspace.
Instinct
Active campaigns
18
Users protected
2,140
Avg click rate
4.2% 1.8
Companies
Add company| Company | Delivery | 30-day clicks | Training | Status | |
|---|---|---|---|---|---|
| HDHarbourline Dental | Direct | 92% | Running | ||
| KLKestrel Logistics | Direct | 78% | Running | ||
| MAMeridian Accounting | Direct | 100% | Running | ||
| NCNorthwind Clinics | SMTP | 64% | Onboarding | ||
| VRVantage Realty | Direct | 88% | Running |
Works with the tools you already run
Microsoft 365 Google Workspace HaloPSA MSPortal
Built around how MSPs work.
Less setup per client, cleaner data, and a program your techs never have to babysit.
0
Allowlist rules
Direct delivery skips the spam filter, so there is nothing to maintain per tenant.
1
Consent per client
Connect a tenant once and users, groups, and new hires sync on their own.
2
Platforms, both first-class
Microsoft 365 and Google Workspace get the same features from day one.
What we build for
Hours back for your techs
Onboarding, enrollment, reminders, and reports run on their own, so awareness training stops eating a tech's week.
Fewer clicks, not more certificates
Simulations land like real mail and training follows a mistake right away, so behavior changes, not just completion rates.
What you get
A service with real margin
One program across every client with no per-tenant upkeep. That makes awareness training something you can price, sell, and grow without adding headcount.
The delivery difference
It lands in the inbox. No allowlisting.
Instinct delivers simulations through Microsoft Graph and the Gmail API, straight into the mailbox. Nothing to allowlist per tenant, no spam filter to fight, and no warning banners bending your numbers.
- Click data you can stand behind in a client review
- No rework when a provider changes filtering rules
- Owned sending domains as a fallback for any tenant that needs it
Inbox Today
APDelivered
Accounts Payable
9:41 AM
Updated invoice, please review
A quick approval is needed before end of day so payment isn't held.
Spot it? Drag the email left to report it.
JR
Jordan ReyesSite visit moved to Thursday
HR
People TeamBenefits enrollment closes Friday
Placed through the Graph API. No filter, no banner.
The gap your stack can't close is the person reading the email.
Endpoint, identity, and email filtering all do their job. Then one person clicks, and the client is exposed. Training is the one control that reaches the people doing the clicking.
A finished course is not the goal. The goal is the half-second where someone pauses, looks twice, and does not click. Instinct is built to grow that reflex, not to log a completion.
Set a client up once. Then it carries the program.
Connect
Authorize Microsoft 365 or Google Workspace. Users sync automatically, from the tenant, HaloPSA, or MSPortal. See integrations.
Enroll
New hires drop into your onboarding campaign, then roll into continuous training. Override per client any time.
Report
Completion, click rates, and who needs a nudge, sent to you and each client's manager on a schedule.
Plugs into the stack you already run.
Connect once. Users, clients, and new hires stay in sync from the tools your team already lives in.
Directory + delivery
Google Workspace
Sync users from the directory, and deliver through the Gmail API with no allowlisting or banners.
PSA
HaloPSA
Sync clients and their users from HaloPSA, so new client sites are ready to enroll without retyping anything.
Client portal
MSPortal
Pull clients and users from MSPortal and keep every roster current as staff come and go.
Purpose-built for MSPs
Direct-to-inbox delivery
Graph and Gmail API delivery puts simulations in the inbox with no allowlisting, no banners, and click data you can trust.
Multi-tenant from day one
MSP over company over user, with strict isolation between clients and bulk changes across all of them at once.
New hires enroll themselves
Directory sync drops new staff into onboarding, then into continuous training. Override any client, any time.
A follow-up engine
Reminders go to anyone who hasn't finished, then a summary goes to their manager. Set the cadence once.
Branded as you, or as them
Emails, training pages, and reports carry your brand or the client's, set per company and kept consistent.
A view for every client
Give each client manager their own dashboard, read-only or co-managed, with scheduled reports to whoever you choose.
Why Instinct
Where Instinct is different.
Most platforms
Instinct
Delivery
Most platformsSent through the spam filter, with allowlists to maintain in every tenant.
InstinctPlaced through the mail platform's API, straight to the inbox.
Google Workspace
Most platformsSupported, but Microsoft 365 comes first.
InstinctFirst-class, with the same features as Microsoft 365.
What counts as success
Most platformsCourses completed.
InstinctClicks going down, with follow-up on the people who still click.
Import history
Harbourline Dental
CSV API PDF
Phishing click rate
Last 12 months
Imported from PhinOn Instinct
Users matched to Microsoft 365214
Phishing results and training completions12 months
Existing staff skip the new-starter course197
6 rows to review Commit import
Your clients won't notice the switch.
Past results, training history, and trend lines come over from your current platform, so every client picks up right where they left off.
- Bring it in any way you have it. CSV exports, a direct API connection, or the PDF reports you already send clients. Phin is supported first.
- No restart for people already trained. Staff who were on a program skip the new-starter course and go straight into ongoing campaigns.
- Reports stay unbroken. Year-over-year trends carry through the switch, so the next client review looks like the last one, only better.
Customers
Questions, answered.
Something else on your mind? Email hello@instinctsec.com.
When can I get access?
Instinct is in private build with a small group of MSPs. Waitlist members get first access as we open more spots.
Do I have to allowlist anything?
Not with Direct delivery. Simulations go in through Microsoft Graph or the Gmail API after a one-time admin consent. If a tenant can't grant that, owned sending domains are available as a fallback with a guided allowlist setup.
Does it work with Google Workspace?
Yes. Google Workspace and Microsoft 365 are both first-class, including user sync, direct delivery, and reporting.
Can I bring results from my current platform?
Yes. Phin is supported first, by CSV export, API, or the PDF reports you already have. Each client's history and trends carry over, and staff who were already on a program skip the new-starter course.
Will my clients notice we switched?
Not in a way that costs you. Their past results stay in their reports, trends continue across the switch, and nobody is asked to redo training they've already done.