Skip to main content
PPPhishPondPhishing Tradecraft Intelligence

Attack · Detection · Validation

CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe
CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe

Research Desk

PhishPond

Phishing tradecraft research desk covering campaign analysis, adversary infrastructure, detection engineering, and validation workflows.

High signal for security teams who need tradecraft, not recycled filler.

Navigate

  • Home
  • Newsroom
  • Research
  • Subscribe

Signals

  • editorial@phishpond.dev
  • Research Mission & Ethics
  • Intel Brief
  • RSS Feed
  • Submit Research Tip
© 2026 PhishPond. Authorized security research use only.

GitHub RadarBlue team tool

syed-sameer-ul-hassan/Phish-Vigil

An enterprise-grade Human Risk Intelligence Platform & Phishing Simulator. Tracks Risk Velocity, Employee Resilience, and Learning Momentum with immutable audit logs Primary language: Python. 8 stars.

Python8 stars0 forkspushed Jun 5, 2026NOASSERTION

Project links:Open GitHub projectBack to radar

README Preview

Fetched from GitHub

<div align="center">

| Side Project Notice | | :--- | | This is a personal, passion project with no current plans for a major feature release. However, I intend to occasionally update it, improve the code, and roll out new releases over time. |

</div>

Enterprise Human Risk Intelligence Platform

Image: Phish-Vigil Logo

Phish-Vigil Aegis is a defensive, audit-grade security platform designed to measure, model, and improve human security behavior. Unlike traditional tools that only count "clicks," Aegis calculates Risk Velocity, Resilience, and Learning Momentum.

---

Author & Maintainer

  • Name: Syed Sameer Ul Hassan
  • Certification: Certified Cybersecurity Technician (CCT) - EC-Council
  • Website: sameer.orildo.online
  • Instagram: syed_sameer_ul_hassan_kazmi
  • Email: sameer@orildo.online

---

Key Features

1. Dual-Score Engine
  • Risk Score (0-100): Measures liability. Increases with unsafe actions, decays naturally over time.
  • Resilience Score (0-100): Measures asset strength. Increases when users report threats or maintain safety streaks.
2. Risk Velocity Tracking
  • Tracks the speed of risk change.
  • Answers the executive question: "Are we getting safer than we were last month?"
3. Compliance-Ready Audit
  • WORM Logging: Write-Once, Read-Many architecture for logs.
  • Integrity Hashing: Every action is SHA-256 hashed to prevent tampering.
  • Role-Based Access Control (RBAC): Strict separation for CISO, Analyst, and Auditor roles.
4. Positive Reinforcement
  • Users are rewarded for reporting phishing simulations.
  • Builds a culture of defense rather than fear.

---

Use Cases

  • Corporate Security Training: Run safe, authorized phishing simulations.
  • Human Risk Analytics: Identify high-risk departments without shaming individuals.
  • Compliance Evidence: Generate ISO 27001 / SOC2 compliant training logs.

---

Installation & Usage

Prerequisites
  • Python 3.8+
  • Install required libraries:
    pip install flask flask-sqlalchemy itsdangerous
Running the Platform
  1. Navigate to the directory:
    cd ~/Desktop/Phish-Vigil-Aegis
  1. Run the server:
    python phish_vigil_aegis.py
  1. Access the Dashboard:
  • API Endpoint: http://127.0.0.1:5000/api/v5/dashboard