Description

Train Your Team to Spot Phishing Before It’s Too Late

LURE is a self-hosted phishing awareness training application that turns security education into an engaging, hands-on experience. Instead of passive videos or checkbox compliance, your users actively work through realistic email and SMS lures — learning to recognize the tactics attackers actually use.

How It Works

Each session presents a series of messages — some phishing, some legitimate — drawn from ten real-world themes including IT helpdesk impersonation, financial fraud, package delivery scams, and more. Players flag the specific red flags they spot (suspicious links, spoofed senders, urgency tactics, QR code quishing) and verdict each message as phishing or legitimate. Every decision is scored and explained.

Key Features

• AI-generated scenarios — Fresh, novel lures created on demand via the Claude API so players never see the same email twice
• Adaptive difficulty — Three difficulty levels from obvious to highly convincing
• Email and SMS channels — Covers both traditional phishing and smishing
• Weak-spot targeting — The engine tracks per-category accuracy and automatically focuses new scenarios on your worst areas
• Progress trends — Session history, score trends, and a phishing/legitimate verdict breakdown so improvement is measurable
• Secure authentication — SCRAM-SHA-256 login means passwords never travel over the wire in any form
• Self-contained installer — Ships as a single Windows .exe. No cloud dependency, no subscription, no data leaving your network

Who It’s For

LURE is built for organizations that want meaningful phishing awareness training they control — small businesses, schools, scouting organizations, and teams who need a practical, private alternative to expensive SaaS platforms.

System Requirements

• Windows 10 or later (64-bit)
• An Anthropic API key for AI-generated scenarios (optional — a built-in question bank works without one)