Fortinet Security Awareness and Training (FortiSAT)

Reduce human risk and strengthen cybersecurity with security awareness training and realistic phishing simulations

Reduce human risk and strengthen cybersecurity with security awareness training and realistic phishing simulations

Fortinet 2025 Security Awareness and Training Global Research Report

Integrated human risk management with FortiSAT

FortiSAT combines security awareness training and phishing simulation to help organizations identify, measure, and reduce human cyber risk. Realistic phishing campaigns expose risky behaviors, while targeted and remediation training supports compliance and strengthens user awareness. Risk scores derived from user actions allow security teams to apply tighter controls to high-risk users and departments, improving overall security posture.

Key FortiSAT features

Identify risky user behavior

Expose human-driven cyber risk through realistic phishing simulations and training interactions that reveal how users respond to real-world threats. FortiSAT identifies vulnerable behaviors before they lead to compromise.

Measure human risk and get actionable insights

Quantify user risk with behavioral signals from phishing outcomes and training performance. FortiSAT translates user actions into measurable insights that help prioritize risk across individuals and teams.

Reduce risk through targeted awareness

Lower human risk with adaptive, role-based training triggered by user behavior. FortiSAT delivers focused remediation that improves awareness, reinforces a cyber-aware culture, and reduces exposure over time.

Start your free FortiSAT trial

Try FortiSAT and see how easy it is to launch security awareness training and phishing simulations from a single platform.

During your trial, you can:

Enroll up to 3 end users

Assign security awareness training

Launch phishing simulation campaigns

Explore the administrator experience

Evaluate core features, functionality, and reporting

A FortiCloud account is required to begin your free trial. If you do not already have one, you can create a FortiCloud account at no cost on forticloud.com .

2025 Security Awareness and Training Service Global Research Report

67% of organizations report fewer incidents with security awareness training. Benchmark your program with global insights and practical steps.

Learn how FortiSAT works

Launch simulated phishing campaigns Launch simulated phishing campaigns Benchmark human risk across your organization by identifying which users engage with realistic phishing emails. Choose from a library of prebuilt email templates or design custom messages. Use existing landing page templates or create your own to test whether users submit sensitive info. All user interactions are recorded, providing administrators with clear visibility and reporting.

Launch simulated phishing campaigns

Benchmark human risk across your organization by identifying which users engage with realistic phishing emails. Choose from a library of prebuilt email templates or design custom messages. Use existing landing page templates or create your own to test whether users submit sensitive info. All user interactions are recorded, providing administrators with clear visibility and reporting.

Utilize advanced phishing campaign features Utilize advanced phishing campaign features Simulated phishing campaigns are highly configurable and include advanced capabilities such as support for attachments with tracking to see which users open them, embedded QR codes with associated reporting, and a selection of multiple available sending domains so users do not recognize a single URL pattern.

Utilize advanced phishing campaign features

Simulated phishing campaigns are highly configurable and include advanced capabilities such as support for attachments with tracking to see which users open them, embedded QR codes with associated reporting, and a selection of multiple available sending domains so users do not recognize a single URL pattern.

Launch training and remedial campaigns Launch training and remedial campaigns Run both compliance-based training programs and remedial training that automatically enrolls users who fail phishing simulations into required courses. You can select from a wide range of ready-made training templates or curate your own program by choosing specific modules from the FortiSAT training library to create a fully-customized learning experience.

Launch training and remedial campaigns

Run both compliance-based training programs and remedial training that automatically enrolls users who fail phishing simulations into required courses. You can select from a wide range of ready-made training templates or curate your own program by choosing specific modules from the FortiSAT training library to create a fully-customized learning experience.

Identify high-risk users Identify high-risk users Quickly identify your highest risk users with a set of risk scores at the user, group, and organizational level. Use those risk scores to apply stronger security controls for high-risk users across other cybersecurity products such as FortiMail and FortiWeb, helping improve overall protection for your organization.

Identify high-risk users

Quickly identify your highest risk users with a set of risk scores at the user, group, and organizational level. Use those risk scores to apply stronger security controls for high-risk users across other cybersecurity products such as FortiMail and FortiWeb, helping improve overall protection for your organization.

Track progress with reporting and analytics Track progress with reporting and analytics Reporting is simplified through a comprehensive set of dashboard widgets, a monitoring view for time-based aggregate analysis, detailed individual campaign results, and prebuilt report templates designed for executive audiences. This enables organizations to easily identify high-risk users, continuously track risk levels and training completion, and ensure overall security awareness performance is moving in the right direction.

Track progress with reporting and analytics

Reporting is simplified through a comprehensive set of dashboard widgets, a monitoring view for time-based aggregate analysis, detailed individual campaign results, and prebuilt report templates designed for executive audiences. This enables organizations to easily identify high-risk users, continuously track risk levels and training completion, and ensure overall security awareness performance is moving in the right direction.

Add a phish-alert button in Outlook Add a phish-alert button in Outlook FortiSAT includes an Outlook add-in that lets users report suspicious emails directly from their inboxes. Organizations can integrate this capability into their existing SOAR workflows so genuine threats are routed to the appropriate threat intelligence channels, while FortiSAT records and reports on simulated phishing emails that are correctly identified and reported by users.

Add a phish-alert button in Outlook

FortiSAT includes an Outlook add-in that lets users report suspicious emails directly from their inboxes. Organizations can integrate this capability into their existing SOAR workflows so genuine threats are routed to the appropriate threat intelligence channels, while FortiSAT records and reports on simulated phishing emails that are correctly identified and reported by users.

Launch simulated phishing campaigns

Benchmark human risk across your organization by identifying which users engage with realistic phishing emails. Choose from a library of prebuilt email templates or design custom messages. Use existing landing page templates or create your own to test whether users submit sensitive info. All user interactions are recorded, providing administrators with clear visibility and reporting.

Utilize advanced phishing campaign features

Simulated phishing campaigns are highly configurable and include advanced capabilities such as support for attachments with tracking to see which users open them, embedded QR codes with associated reporting, and a selection of multiple available sending domains so users do not recognize a single URL pattern.

Launch training and remedial campaigns

Run both compliance-based training programs and remedial training that automatically enrolls users who fail phishing simulations into required courses. You can select from a wide range of ready-made training templates or curate your own program by choosing specific modules from the FortiSAT training library to create a fully-customized learning experience.

Identify high-risk users

Quickly identify your highest risk users with a set of risk scores at the user, group, and organizational level. Use those risk scores to apply stronger security controls for high-risk users across other cybersecurity products such as FortiMail and FortiWeb, helping improve overall protection for your organization.

Track progress with reporting and analytics

Reporting is simplified through a comprehensive set of dashboard widgets, a monitoring view for time-based aggregate analysis, detailed individual campaign results, and prebuilt report templates designed for executive audiences. This enables organizations to easily identify high-risk users, continuously track risk levels and training completion, and ensure overall security awareness performance is moving in the right direction.

Add a phish-alert button in Outlook

FortiSAT includes an Outlook add-in that lets users report suspicious emails directly from their inboxes. Organizations can integrate this capability into their existing SOAR workflows so genuine threats are routed to the appropriate threat intelligence channels, while FortiSAT records and reports on simulated phishing emails that are correctly identified and reported by users.

FortiSAT Cloud (SaaS)

FortiSAT Cloud is a SaaS-based security awareness training and phishing simulation service that delivers rapid deployment, automatic updates, and scalable protection without on-premises infrastructure.

Comprehensive email template library

Custom email template creation

Support for landing pages (two-stage campaigns, email and landing)

Custom landing-page creation

QR code phishing support

Phish-alert button (Outlook/M365) to report phishing emails

Custom-defined SmartGroups

Over 12 micro modules

Azure AD attribute support

User and group sync (LDAP)

SSO (admin and end user)

Dashboard and reporting

Risk scoring for users, groups, and organization levels

High-risk users and groups dashboard widget

Custom phish report generator

Security Awareness Training & Phishing Simulation

FortiSAT combines Fortinet Security Awareness Training (SAT) and phishing simulation into a unified cloud delivered platform designed to measure, manage, and reduce human cyber risk.