Simulate
Build an authorized scenario with targets, templates, delivery profiles, landing pages, and optional stages.
Authorized simulation · Human risk
Run realistic phishing simulations.Measure and reduce human risk.
TaiGong gives security teams one operating loop to design authorized phishing exercises, observe employee behavior, prioritize risk, connect results to licensed targeted training, and review improvement—through managed SaaS or self-hosted deployment.
Version 1.3.4
Email core
SaaS / Self-hosted
TAIGONG / OPERATIONS VIEW● LIVE EVIDENCE
Campaign evidenceQuarterly finance exercise · authorized scope
NOISE FILTER: ONDelivered128
Opened87
Clicked41
Reported22
Behavior by stage
Human risk index
72.8
Employee eventClicked · Chrome · desktop
Security trafficPrefetch · labeled · excluded
Follow-upTargeted training · queued
Authorized by designWritten scope required
Email + licensed channelsExact matrix published
Live behavioral evidenceEvents and timelines
Risk to trainingLicensed workflow
Your deployment boundarySaaS or self-hosted
01 / Operating model
More than a mail sender
One loop for continuous improvement.
Basic campaign tools stop at delivery and click counts. TaiGong connects simulation design, live behavioral evidence, risk analysis, targeted training, and follow-up in one operating model.
Observe
Follow delivery, opens, clicks, submissions, reports, and available environment evidence.
Score
Review individual, departmental, and campaign risk instead of relying on one percentage.
Train
Move higher-risk users into focused awareness training when the licensed module is enabled.
Verify
Use later exercises and reviewable automation history to measure operational change.
02 / Product difference
Evidence · risk · governance
Designed around decisions, not feature count.
TaiGong separates the core email workflow from licensed modules and advanced controls. The public support matrix states exactly what version 1.3.4 supports today.
Know what happened before you report the metric.
Review campaign events and timelines. Licensed environment analysis can help label gateway, scanner, prefetch, cloud, device, and network signals so automated traffic is not mistaken for employee behavior.
Prioritize the people and teams that need follow-up.
Use core scoring and evidence, with licensed advanced analytics, department views, awareness training, and PDF reporting where enabled.
Make repeatable actions reviewable.
Time- and event-based rules, multi-stage orchestration, scheduled jobs, and execution history support a continuing program.
Operate inside the boundary your organization requires.
Choose managed SaaS or customer-controlled infrastructure. Tenant-aware resources and API tokens are core; RBAC and the audit-log console are licensed capabilities.
03 / Product tour
Current interface · v1.3.4
See the workflow, not a decorative dashboard.
Each view is tied to an operating question: how to design the exercise, what the evidence says, and what happens next.
Build the campaign around an authorized scenario.
Choose delivery method, target scope, templates, landing pages, sending configuration, and available controls in one campaign workflow.
Move from campaign events to a risk review.
Analyze employees, departments, campaigns, risk levels, and evidence context. Advanced dashboards and exports remain subject to the applicable license.
Connect higher-risk behavior to focused training.
The licensed awareness module manages courses, training batches, assessments, and completion statistics—so follow-up can be specific rather than universal.
04 / Deployment
Choose your operating boundary
Managed speed or customer control.
The product model remains consistent; infrastructure responsibility, data location, and licensing differ.
Start without maintaining the application environment.
Yofune_Labs operates the service while your team manages authorized exercises and follow-up.
- Tenant-aware workspace
- Managed application updates
- Annual employee-based plans
- Best for pilots and lighter operations
Keep infrastructure and evidence inside your network.
Run the packaged server in your data center or private cloud and control databases, credentials, network exposure, logs, backups, and retention.
- Customer-controlled infrastructure
- SQLite default; MySQL for SaaS runtime
- Machine-bound commercial licensing
- Documented private delivery path
05 / Honest comparison
A broader operating workflow
When a basic campaign tool is no longer enough.
GoPhish remains useful for straightforward email exercises. TaiGong is intended for teams that need the workflow to continue into risk analysis, training, automation, licensed channels, or enterprise operations.
Requirement
Basic email tool
TaiGong 1.3.4
Email campaign workflow
Typical
Core
SMS / supported enterprise IM
Varies
Licensed, exact matrix
Human-risk and awareness workflow
Usually external
Core + licensed modules
SaaS and self-hosted paths
Product dependent
Both available
RBAC and audit console
Product dependent
Licensed
06 / Trust
Proof before promises
Versioned facts, explicit boundaries.
The English launch does not rely on anonymous star ratings or an ambiguous logo wall. It publishes current availability, license boundaries, deployment responsibilities, and authorized-use controls.
“If a capability is not supported in 1.3.4, the website should say so before the buyer has to ask.”
07 / Research
Engineering judgment in public
Research grounded in operating reality.
Notes on gateway interference, measurement noise, human risk, multi-stage operations, private deployment, MCP, and advanced simulation boundaries.
08 / TaiGong platform family
Three formal platforms
Three platforms. One security product family.
TaiGong Drill is the current public flagship at v1.3.4. TaiGong Trace covers incident response and attack-chain tracing; TaiGong MailLab covers email-sample analysis and security operations. Each platform’s version, license, and delivery scope is confirmed separately.
Phishing simulation and human-risk operations.
Authorized exercise design, behavioral evidence, risk analysis, optional training and automation, SaaS, and self-hosted delivery.
Incident response and attack-chain tracing.
Trace is a formal TaiGong platform for incident response and attack-chain tracing. Current version, licensing, integrations, and delivery scope are confirmed per project.
Email-sample analysis for security operations.
MailLab is a formal TaiGong platform for email-sample analysis and security operations. Sample handling, collaboration, licensing, and delivery scope are confirmed per project.
Authorized security testing
See how TaiGong fits your program.
Walk through one representative workflow, or evaluate the self-hosted boundary with your infrastructure and governance requirements.