DON'T TAKE THE BAIT
Created by The Project Cheesecake Team
on behalf of
Insightful Phish is a web-based cybersecurity awareness and training platform that helps individual trainees and organisations learn how to recognise and respond to common cyber threats, especially phishing attacks.
The platform combines realistic attack simulations with interactive training to create a practical learning experience. Organisation Administrators can build Campaigns from reusable Simulated Inboxes, Training Documents, Quizzes, and adaptive Campaign items. The system tracks trainee interactions and provides feedback to help trainees improve.
In addition to simulations, the platform uses training material and quizzes to teach trainees how to identify suspicious behaviour, avoid common mistakes, and build better security habits.
To support organisations, Insightful Phish provides Campaign Insights that show trainee progress, Campaign completion, Quiz results, simulated-email interactions, adaptive resolutions, real-email delivery, and managed-portal activity.
By focusing on human behaviour, the most common source of security breaches, the platform helps individuals and organisations reduce risk and build a stronger security culture.
DON'T TAKE THE BAIT. LEARN TO SPOT IT.
For Demo 4, Insightful Phish is a complete web-based cybersecurity awareness and training platform for individual trainees and organisations. The product includes account registration, verification and recovery, organisation onboarding, invitations, role and permission management, security settings, and organisation context.
Platform Administrators manage organisation registrations, organisations, other Platform Administrators, and reusable Platform Campaigns that individual trainees can browse and join. Organisation Administrators manage their members, author Training Documents, Quizzes, Organisation Emails and Simulated Inboxes, build organisation Campaigns, and assign active Campaigns to eligible trainees.
Trainees can browse or receive Campaigns, work through ordered training activities, review Quiz results, classify simulated emails, and interact with controlled phishing links. The platform records their progress and keeps each trainee's results within the correct personal and organisation scope.
Campaign Insights give authorised Organisation Administrators a consolidated view of assignments, completion, Quiz performance, simulated-email activity, adaptive resolutions, real-email delivery, and managed-portal interactions.
The Demo 4 wow factors extend these core workflows. Adaptive Campaign items select and persist an appropriate difficulty. AI can draft editable content, missing adaptive variants, and Campaign proposals, while administrators retain control over every save and lifecycle decision. Real-email phishing simulations use configured SMTP profiles to schedule and send controlled messages, and managed phishing portals record link activity while providing safe educational feedback.
Together, these capabilities cover the complete product from account access and organisation administration to Campaign creation, delivery, trainee participation, and reporting.
- Project Board: https://project.insightfulphish.co.za
- Project Issues: https://issues.insightfulphish.co.za
- Project Pull Requests: https://pr.insightfulphish.co.za
- GitHub https://github.insightfulphish.co.za ← You are here
- Help https://help.insightfulphish.co.za
- Demo 4 Documentation: https://docs.insightfulphish.co.za
- Swagger Documentation (API Contracts): https://swagger.insightfulphish.co.za
- Brand Guidelines: https://brand.insightfulphish.co.za
- Demo 4 Video: https://video.insightfulphish.co.za
Click here to see the Demo 3 Documentation and Video
- Demo 3 Documentation: docs/demo3/README.md
- Swagger Documentation (API Contracts): docs/demo3/sas/api-contracts.md
- Brand Guidelines: docs/demo3/brand/README.md
- Demo 3 Video: Youtube
Click here to see the Demo 2 Documentation and Video
- Demo 2 Documentation: docs/demo2/README.md
- Swagger Documentation (API Contracts): docs/demo2/sas/api-contracts.md
- Brand Guidelines: docs/demo2/brand/README.md
- Demo 2 Video: Youtube
Click here to see the Demo 1 Documentation and Video
- Software Requirements Specification: docs/demo1/SRS.md
- API Contracts: docs/demo1/API.md
- Architecture: docs/demo1/architecture.md
- Traceability: docs/demo1/traceability.md
- Testing Documentation: docs/demo1/testing.md
- Design Specification: docs/demo1/DESIGN.md
- Diagrams: docs/demo1/diagrams/README.md
- Wireframes: docs/demo1/wireframes/README.md
- Demo 1 Video: YouTube
This repository is organised as a pnpm workspace monorepo:
apps/frontend: React, Vite, and TypeScript trainee-facing frontendapps/backend: Express, TypeScript, Prisma, and PostgreSQL backendpackages/shared: Shared TypeScript types and validation contracts
The project uses a lightweight feature-branch workflow with dev as the integration branch and main as the stable branch. Developers create short-lived feature/*, fix/*, chore/*, or docs/* branches from dev, open pull requests back into dev, and promote stable milestone work from dev to main.
 Area |
 Tools |
|---|---|
| Frontend | React, Vite, TypeScript, HTML, CSS |
| Backend | Node.js, Express, TypeScript |
| Database | PostgreSQL, Prisma |
| Local Infrastructure | Docker Compose |
| Testing | Vitest, Supertest, React Testing Library |
| CI/CD | GitHub Actions |
| Package Management | pnpm workspaces |
| Version Control | Git, GitHub |
 Team Member |
 Role |
 GitHub |
 LinkedIn |
|---|---|---|---|
|
|
@FJNel |
Johan's LinkedIn |
|
|
@u24569608 |
Connor's LinkedIn |
|
|
@Adri4no098 |
Adriano's LinkedIn |
|
|
@ZoeJ72005 |
Zoë's LinkedIn |
|
|
@RudolphLamp |
Rudolph's LinkedIn |
While roles are clearly defined, the team will work collaboratively across different areas of the system. Members will support one another where needed, ensuring flexibility and consistent progress throughout the project.
