Skip to content

Diagnostics, Teachable Moment "Oops" Redirects & API Key Management

1. Executive Summary & Value Proposition

Enterprise security architectures require continuous operational health checks, immediate educational intervention when users fail simulations, and secure programmatic interfaces for automation. SimuPhish provides these advanced governance capabilities through Diagnostics, Teachable Moment "Oops" Redirects & API Key Management (Main Navigation > Settings > Diagnostics & Oops and Settings > API Management). Security administrators can perform comprehensive system health checks, configure dynamic teachable moment landing pages, and generate enterprise REST API keys and Model Context Protocol (MCP) endpoints for custom automation.

2. The Threat Landscape & The Real-World Problem Solved

  • Silent System Failures: If background workers, webhook listeners, or SMS gateways fail silently, critical simulation campaigns or compliance reports can stall without warning.
  • Missed Teachable Moments: When an employee clicks a simulated phishing link, failing to provide immediate, contextual feedback wastes the most receptive learning window.
  • Manual Data Workflows: Organizations with custom SOC automation, ticketing platforms (Jira, ServiceNow), or internal data lakes need secure programmatic access to export risk data without manual CSV downloads.

3. How It Works (The User Journey)

graph TD
    A[Enterprise Administration] --> B[Diagnostics & Oops Tab]
    A --> C[API Management Tab]
    B --> B1[System Health Check: Delivery Engine, Webhooks, Storage]
    B --> B2[Oops Teachable Moment Builder & Custom Redirect URL]
    C --> C1[Generate Enterprise REST API Key]
    C --> C2[Active Keys Ledger: Name, Created Date, Status, Revocation]
    C --> C3[Model Context Protocol MCP Endpoints for AI Integration]

The Administrator Experience

  1. Platform Diagnostics & Health Checks (Settings > Diagnostics & Oops):
  2. Real-Time Health Status: Review connectivity status across core platform services: email delivery workers, SMS dispatch gateways, AI vishing providers, database health, and storage clusters.
  3. Troubleshooting Assistant: Instant diagnostic tests verify whether outbound simulation traffic can reach destination mailboxes without network blockage.
  4. Teachable Moment "Oops" Redirects & Builder (Settings > Diagnostics & Oops):
  5. The "Oops" Philosophy: When an employee clicks a simulated phishing link or enters credentials, they are immediately redirected to a teachable moment page explaining that this was a safe training drill.
  6. Customizable Oops Layouts: Use the visual Oops builder to customize headlines, instructional text, corporate logos, and actionable red-flag breakdowns (e.g., highlighting spoofed sender address, artificial urgency, deceptive URLs).
  7. Custom Redirect URL: Alternatively, enter an external URL (e.g., an internal company intranet security awareness portal) where susceptible employees are automatically redirected upon clicking.
  8. Enterprise API Key Management (Settings > API Management):
  9. Generate API Key: Create cryptographically secure REST API tokens to programmatically trigger campaigns, sync users, query human risk scores, and export compliance data.
  10. Active Keys Ledger: View active keys, created dates, last-used timestamps, and token owners.
  11. One-Click Key Revocation: Instantly revoke compromised or decommissioned API keys with a single click.
  12. Model Context Protocol (MCP) Integration: SimuPhish provides standardized MCP endpoints, enabling enterprise AI assistants to securely interface with platform intelligence.

4. Key Business Benefits & Measurable ROI

  • Transform Mistakes into Learning: Immediate teachable moment feedback reduces future click susceptibility by up to 50% compared to delayed training notifications.
  • Proactive Operational Reliability: Platform diagnostics ensure campaigns execute smoothly without silent delivery bottlenecks.
  • Seamless Enterprise Automation: REST API keys allow security teams to integrate SimuPhish telemetry into ServiceNow, Jira, and internal executive dashboards.
  • Next-Gen AI Capabilities: Model Context Protocol (MCP) support prepares your enterprise to integrate awareness data into modern AI-driven security operations.

5. Real-World Attack Scenario & Case Study

Scenario: The ServiceNow SOC Integration

  • The Situation: A technology multinational wanted to automatically create an incident ticket in ServiceNow whenever an executive-level employee clicked a simulated phishing link.
  • SimuPhish Action: The security automation team accessed Settings > API Management, generated a secure Enterprise REST API key, and configured a webhook listener.
  • Integration Result: When a VP of Product clicked a simulated QR code attack, SimuPhish immediately redirected the executive to a tailored "Oops" teachable moment on the internal intranet, while simultaneously firing an API payload to ServiceNow. ServiceNow automatically created a ticket assigning a 15-minute 1-on-1 briefing with the CISO.
  • Outcome: Zero manual paperwork, immediate executive education, and full governance alignment across enterprise IT platforms.