What user roles does the platform support?

Three roles — Super Admin (full platform control), Admin (manages employees and campaigns for their company), and Employees (complete training and receive simulated phishing tests).

How does the phishing simulator work?

Admins launch one-time or recurring simulated phishing campaigns. The platform tracks employee responses — opens, clicks, and replies — and reports on engagement and behavior patterns.

How is the platform secured?

Through Google Multi-Factor Authentication for logins, domain verification via TXT records to confirm legitimate access, and Git-based version control with encrypted connections to protect code and data.

How does the platform scale as a client's business grows?

The platform uses a multi-tenant architecture with AWS auto-scaling, so resources adjust dynamically with usage — supporting more clients and employees without compromising performance.

Does TBI build custom SaaS platforms like this for other industries?

Yes. TBI designs and builds custom, multi-tenant SaaS platforms across industries — from cybersecurity and training tools like this one to internal business platforms — tailored to each client's user roles, workflows, and scaling needs.

What tech stack does TBI use for SaaS and web app development?

TBI builds primarily with React Js and Node Js for fast, real-time front-end and backend experiences, paired with databases like MongoDB or MySQL/PostgreSQL depending on the project, plus secure integrations such as Google MFA, Nylas, and AWS-based auto-scaling infrastructure.

Does TBI provide support after the platform goes live?

Yes. TBI offers ongoing support and maintenance after launch, including monitoring, security updates, feature enhancements, and scaling support as a client's user base and requirements grow.

Home Portfolio SaaS Platform for Corporate Phishing Training & Simulation

SaaS Platform for Corporate Phishing Training & Simulation

2 Core Modules

3 User Roles

Multi-Tenant Architecture

SaaS Platform for Corporate Phishing Training & Simulation

Overview

A multi-tenant SaaS platform to train employees against phishing attacks.

The project aimed to develop a SaaS platform designed to prevent phishing attacks. Built with a multi-tenant architecture, the platform offers a scalable and secure solution for corporate organizations of all sizes, each with a separate environment.

The platform empowers businesses to proactively protect themselves by training employees to identify and prevent phishing attacks, fostering a culture of cybersecurity awareness.

Sam Ardren

Fact Sheet

Company

Sam Ardren

Industry

Cybersecurity

Technology

React Js / Node Js

3rd-Party Integrations

Google MFA, Nylas API

Database

MongoDB

The Requirement

A tailored, secure platform had to be built from the ground up.

The client required a tailored multi-tenant SaaS platform with a Learning Management System (LMS) and Phishing Simulator.

A secure, multi-tenant platform

Corporate organizations of all sizes needed their own separate, scalable environment.

A Learning Management System (LMS)

Employees needed structured training to identify and prevent phishing attacks.

A Phishing Simulator

The platform needed to run simulated phishing campaigns and track employee responses.

Secure logins and email integrations

The platform needed third-party integrations for secure authentication and email campaign delivery.

Why This Approach

Six elements of TBI’s development plan

TBI’s Agile Development team successfully implemented key features, including user roles, domain verification, third-party API integrations for email campaigns, and secure logins.

Intuitive Dashboard with ReactJs & NodeJs

TBI built a fast, real-time, and interactive dashboard with ReactJs, backed by a robust, seamless backend powered by NodeJs.

User Roles and Access Levels

The platform supports 3 distinct user roles. Super Admins get full platform access — managing settings, content, phishing templates, and analytics. Admins manage their company’s employees, schedule campaigns, and track results. Employees access training courses, complete quizzes, and receive simulated phishing emails, with their actions tracked and reported.

Core Functionality

The platform runs on two core modules: a Learning Management System (LMS) for phishing-awareness training, and a Phishing Simulator that lets Admins launch one-time or recurring simulated campaigns and track opens, clicks, and replies.

Scalable SaaS Architecture

TBI designed a scalable, secure multi-tenant platform that keeps each client’s data separate. The platform uses AWS auto-scaling to adjust resources dynamically as usage grows, and Git-based version control with encrypted connections to keep code and access secure.

Reports & Analytics

TBI implemented domain verification (via TXT records) to confirm email domain ownership and prevent misuse, plus reporting tools that track course completion, quiz results, and campaign engagement — helping identify gaps and behavior patterns.

Integrating APIs

TBI integrated Google MFA for secure two-factor logins and the Nylas Email API to automate and track training and phishing-simulation email campaigns, including opens, clicks, and replies.

The Solution

How TBI built a secure, scalable phishing-training platform

Six connected components covering the dashboard, access control, training and simulation modules, architecture, security, and reporting.

Real-Time Dashboard

Built with ReactJs and NodeJs for a fast, interactive, real-time experience.

Role-Based Access Control

Three distinct roles — Super Admin, Admin, Employee — each with tailored permissions and workflows.

LMS + Phishing Simulator

Two connected modules covering structured training content and simulated phishing campaigns.

Multi-Tenant, Auto-Scaling Architecture

Separate environments per client, with AWS auto-scaling to handle growth without performance loss.

Secure Logins & Email Automation

Google MFA and Nylas Email API integrated for secure access and automated, trackable campaigns.

Reporting & Domain Verification

Tracks course completion, quiz results, and campaign engagement, while verifying domain ownership to prevent misuse.

Solution concept

A unified view of training progress, campaign performance and user roles.

Result: A SaaS Solution for Phishing Awareness and Prevention

1 Year

Monitoring period referenced in results

Core modules delivered (LMS + Simulator)

User roles supported

The project has delivered measurable results in educating employees on phishing awareness.
By cultivating a culture of phishing awareness, businesses are better equipped to defend against cyber threats and build a more secure future.

Over the past year, the platform has provided a scalable, secure solution that streamlines training, tracks performance, and supports multi-tenancy — enabling the client to expand its customer base and drive revenue growth.

What the client said

TBI delivered an outstanding platform that runs brilliantly. Their expertise, attention to detail, and commitment to excellence truly set them apart. Highly recommended.