Design
Create targets, groups, templates, landing pages, and sending profiles inside an authorized scope.
TaiGong Drill · Current version 1.3.4
Phishing simulation that connects delivery, behavior, risk, and training.
01 / Operating loop
One platform · Reviewable actions
From exercise design to follow-up.
TaiGong keeps the campaign workflow and the human-risk workflow connected without pretending that every module is part of the free core.
Deliver
Use core email delivery or separately licensed SMS and supported enterprise-IM modules.
Observe
Review sent, opened, clicked, submitted, and reported events with available evidence context.
Prioritize
Use core risk signals and licensed advanced analytics to focus follow-up.
Act
Enable licensed training, stages, and automation when the program requires them.
02 / Versioned availability
Core · Licensed · Integration-only
Exact capability boundaries for 1.3.4.
Core means the Community baseline. Licensed means the feature is delivered only with the applicable commercial entitlement. Integration-only means an external service receives TaiGong events but is not a simulation-delivery channel.
| Capability | Status | What is delivered now |
|---|---|---|
| Email campaigns | Core | Targets, groups, templates, landing pages, SMTP profiles, campaign results, and IMAP report monitoring. |
| Campaign event evidence | Core | Delivery, open, click, submission, report, results, and timeline views. |
| API tokens and tenant-aware resources | Core | Scoped platform access and tenant-owned resources. |
| SMS delivery | Licensed | Provider-backed SMS templates, sending, logs, callbacks, and click status. |
| DingTalk, Feishu, and WeCom delivery | Licensed | Supported enterprise-IM templates and delivery when the matching provider is configured. |
| Stages, automation, advanced analytics, awareness training, RBAC, and audit console | Licensed | Available only when the corresponding 1.3.4 entitlement is enabled. |
| AI-assisted content and analysis | Licensed | Current AI assistance is provider-configured content and analysis—not an autonomous campaign agent. |
| Slack event notification webhook | Integration-only | Slack can receive selected outbound TaiGong event notifications. It is not a phishing-simulation delivery channel. |
| Slack or Microsoft Teams simulation delivery | Unsupported | Neither channel is shipped as an exercise-delivery provider in 1.3.4. |
| Autonomous AI Agent / v1.3.5 features | Unsupported | Not represented as delivered in the current public version. |
03 / Evidence before metrics
Observe · Explain · Act
Know what happened before reporting a percentage.
TaiGong combines campaign events with the evidence context available in the current deployment. Licensed environment analysis can add gateway, prefetch, cloud, device, network, and quality signals.
Follow the exercise as a sequence of events.
Review delivery, opens, clicks, submissions, reports, recipient results, and timelines from the same campaign operation.
Do not confuse security traffic with employee behavior.
Environment and quality controls can help label scanners, prefetch, cloud networks, device context, and other non-human signals where enabled.
Prioritize follow-up.
Use core scores and campaign evidence, then add department analysis, trends, exports, and higher-risk views with the advanced analytics entitlement.
Turn findings into reviewable action.
Licensed awareness, stages, and automation modules support courses, training batches, assessments, scheduled actions, event triggers, and execution history.
04 / Deployment and governance
Managed or customer-controlled
Operate inside the boundary your organization requires.
Choose managed SaaS for less application maintenance, or run the packaged platform in your own infrastructure. RBAC and the audit-log console remain licensed capabilities in 1.3.4.
Authorized simulation
Walk through one real workflow.
Use a representative authorized scenario to review design, evidence, risk, licensing, and deployment fit.