Fewer Clicks, More Questions Asked: How City 1 Group uses revel8 to change how its team reacts

‍Why City 1 Group chose revel8

Before working with revel8, City 1 Group found its employees increasingly targeted by AI-driven phishing attacks and social engineering attempts. Traditional e-learning modules had little lasting effect. Click rates on phishing emails remained too high, and there was no automated, realistic training approach that could keep pace with the growing threat landscape. What ultimately convinced the team was revel8's multi-channel approach, combining AI-generated phishing emails, deepfake calls and personalized OSINT-based scenarios that reflect real attack situations far better than generic templates. The company also valued how little effort the setup required from its IT team, since the playlists run largely automatically.

‍

Details on partnership

Just months into the partnership, the team is already running revel8 across close to 100 employees. The onboarding went smoothly, with the technical setup completed within a few days and very little involvement needed from the internal IT staff. The first simulations led to genuine moments of realisation among employees, especially the realistic deepfake voice calls that showed just how convincing modern attacks have become. A short adjustment period was needed before all the processes around reporting suspicious messages were properly established.

Across the partnership, the company used email phishing simulations, AI driven deepfake voice calls, OSINT based targeting, automated attack playlists and micro trainings triggered after a click event. The automated playlists stands out as a particular favourite because they keep simulations running continuously and adapt to each employee's risk profile without constant manual steering. That helps the company to develop a solid routine for detecting attacks without requiring constant active oversight.

‍

Initial success

• The company has seen the interaction rate on simulated phishing emails drop noticeably to just 6%, showing that employees are far less likely to fall for an attack than when they started.
• What stands out as well is the rise in reported suspicious messages, with employees now actively checking in before they click on links or share information. Security awareness is no longer treated as an abstract topic but something that shows up in everyday work.
• What has also surprised the company is how well the simulations have been received across the workforce. Employees find the training relevant and realistic, rather than just another box to tick. 

‍

Looking forward

Looking ahead, City 1 Group plans to increase the frequency of its phishing simulations with revel8. The team also intends to introduce new attack types, broadening the range of scenarios employees encounter and keeping their awareness sharp over time.

‍