Fewer Clicks, More Questions Asked: How City 1 Group uses revel8 to change how its team reacts

About City 1 Group

City 1 Group GmbH is a real estate developer that specializes in the project development and management of commercial and residential properties. With a focus on quality and long-term value, the company serves investors, home buyers and business partners across the German-speaking region.

Why City 1 Group chose revel8

Before working with revel8, City 1 Group found its employees increasingly targeted by AI-driven phishing attacks and social engineering attempts. Traditional e-learning modules had little lasting effect. Click rates on phishing emails remained too high, and there was no automated, realistic training approach that could keep pace with the growing threat landscape.

What ultimately convinced the team was revel8's multi-channel approach, combining AI-generated phishing emails, deepfake calls and personalized OSINT-based scenarios that reflect real attack situations far better than generic templates. The company also valued how little effort the setup required from its IT team, since the playlists run largely automatically.

Details on partnership

City 1 Group has been working with revel8 for over half a year. The onboarding went smoothly, with the technical setup completed within a few days and very little involvement needed from the internal IT staff. The first simulations led to genuine moments of realisation among employees, especially the realistic deepfake voice calls that showed just how convincing modern attacks have become. A short adjustment period was needed before all the processes around reporting suspicious messages were properly established.

Across the partnership, the company used email phishing simulations, AI driven deepfake voice calls, OSINT based targeting, automated attack playlists and micro trainings triggered after a click event. The automated playlists stands out as a particular favourite because they keep simulations running continuously and adapt to each employee's risk profile without constant manual steering. That helps the company to develop a solid routine for detecting attacks without requiring constant active oversight.

{{quote}}

Initial success

The reporting rate for suspicious messages has increased noticeably. At the same time, the interaction rate with simulated phishing attempts has dropped and settled at a steady 3%, down from a peak of 13% earlier in the partnership. Employees are now actively checking in before they click on links or share information, rather than reacting on impulse. Security awareness is no longer treated as an abstract topic but something that shows up in everyday work. What has surprised the company is how well the simulations have been received across the workforce. Employees find the training relevant and realistic, rather than just another box to tick.

{{stats}}

Looking forward

Looking ahead, City 1 Group plans to increase the frequency of its phishing simulations with revel8. The team also intends to introduce new attack types, broadening the range of scenarios employees encounter and keeping their awareness sharp over time.