The report rate is the percentage of employees who report a simulated or real phishing attack, used as a key indicator of security awareness. It says more than the click rate, and a well-run pilot aims to close the 28-minute median gap between a click and a report.
