About SimuPhish

Built in London and Dubai. Deployed across EMEA, APAC, and the Americas.

SimuPhish was founded in January 2025 in stealth. We came out of red-team engagements where we kept seeing the same problem: the phishing tools the security industry sold our customers were not the phishing tools we used in real attacks. They were slower, less personal, and one-channel. We built SimuPhish to close that gap, for every region, in every language.

The editorial

We don’t train your people. We measure them.

For two decades, the security industry sold annual training videos and quarterly phish-tests. They produced compliance documents. They did not produce risk numbers that moved.

Today we ship four modules. SimuGPT writes the lures. SimuHDR runs autonomous, multi-vector campaigns across email, SMS, Microsoft Teams, Slack, and voice. SimuCast tests reflex against the lures landing this week. SimuShield catches what slips by, and runs a 24/7 helpline for the moment something feels off.

Read your humans the way attackers do, so you stop being surprised.

How we operate

Four principles we will not trade.

01.
Built by attackers.
Our founding team comes from offensive security. We've run real red-team engagements against banks, hospitals, governments, and our own friends. We build from the attacker's seat.
02.
Defense, not theatre.
Annual training is theatre. Compliance reports without behaviour change are theatre. We build the platform that ships reflex, not certificates.
03.
Quiet by default.
We do not name and shame employees. We do not surveil individuals. Aggregated views first. Audit log every drill into individual data.
04.
Built where it lands.
London for the engineering core. Dubai for MENA customers and partners. Hire local, ship global, stay close to the people we protect.

Milestones

From a stealth garage to four-module GA, in twelve months.

Jan 2025

Founded in stealth.

Started inside a red-team garage in London. Built the first SimuCast prototype against our own customers under NDA.

Mar 2025

Pre-seed: $325K.

Raised from a small group of operators who built and bought offensive-security software before. No ticker tape.

Jul 2025

EMEA launch.

Came out of stealth with first ten production customers across the UK, France, Germany, and the UAE.

Oct 2025

Seed: $1M.

Closed a focused seed to ship SimuHDR autonomous campaigns and open the Dubai office.

Jan 2026

Four-module GA.

SimuGPT, SimuHDR, SimuCast, and SimuShield reached general availability across EMEA, APAC, and the Americas.

The team

Small. Sharp. Hiring.

See open roles

Red-team DNA

London → DubaiSimuPhish

Founding Team

Offensive security · ex red team

The Engine Room

51°30′N · LondonSimuPhish

London Engineering

Platform · AI · infrastructure

The Front Line

25°12′N · DubaiSimuPhish

Dubai Field

Customers · partnerships · MENA

Join the Crew

London + DubaiSimuPhish

Growing fast

4 open roles. We are hiring.

Funding to date

$1.325M raised. Zero corporate sprawl.

Pre-seed · March 2025

$325,000

From a small group of offensive-security operators and angel investors who shipped before they wrote checks.

Seed · October 2025

$1,000,000

Closed in three weeks. Used to ship SimuHDR autonomous campaigns and open the Dubai office.

Global presence

EMEA, APAC, and the Americas. All first class.

Most platforms pick a home region. SimuPhish was architected from day one to operate natively across all three. Gulf Arabic dialect lures. SAMA and NESA compliance mappings. EU data residency. US-region infrastructure. Every region gets the full platform, not a localised afterthought.

EMEA