Fallax

Fallax is a phishing simulation and awareness platform from Ghent, operated by Blink Technologies CommV at Rijkstraat 55 in Verrebroek, Belgium, enterprise number 1018.579.875, registered with the RPR Gent, division Dendermonde. Its terms are governed by Belgian law with the courts of Brussels.

Simulations are injected inside the customer own Google Workspace or Microsoft 365 tenant, so no sending domain, DNS record or allowlisting is needed and the message does not travel over the public email system. The privacy notice says credential values entered on a simulated login page are never stored, only that a submission happened and which field names were present.

Each person follows their own schedule, adjusted by their last result, from every two weeks to every eight.

People who click are trained at that moment, people who report are thanked with points and a streak, and the lure library is ranked by the apps the tenant uses. The evidence export has a timestamped row per person and syncs continuously to Vanta, Drata, Secureframe and Sprinto, mapped to ISO 27001, SOC 2, NIS2, DORA, PCI DSS, HIPAA and GDPR. A blocked or undelivered message is never counted as training.

The first 10 seats are free permanently with the full product; seats 11 to 100 cost EUR 1.00 each, falling to EUR 0.40 above 1,000. The scope is narrower than the large suites: the pages read describe email simulations and click-time training, not a broad lesson catalogue, voice or SMS channels.

Customer data is stored in the EU, with Cloudflare, Resend, PostHog, Featurebase and Stripe as sub-processors, and it needs a Google or Microsoft tenant. Admins and people who only read reports are not counted as seats, and an 80 percent discount for 12 months exists for qualifying startups under 100 people.

What Fallax does well

• Blink Technologies CommV is a Belgian company with an enterprise number, under Belgian law
• The first 10 seats are free permanently, with the whole product and no card
• EUR 1.00 per seat for seats 11 to 100, with each rate applying only inside its bracket
• Simulations delivered inside the Google Workspace or Microsoft 365 tenant, with no DNS work
• A timestamped per-person evidence export that syncs to four compliance platforms

Where Fallax falls short

• Needs Google Workspace or Microsoft 365; other mail systems are not covered
• The pages read describe email simulations only, not SMS or voice
• No broad lesson catalogue is described; training happens at the moment of a click
• No certification named on the pages read

Standout feature. Fallax is the only platform here that publishes a full per-seat rate card with permanently free first seats and a per-person export for the compliance platform.