Phishing simulation
What is reporting rate?
Also called Report rate.
The percentage of people who reported a suspicious message rather than ignoring or clicking it.
In more detail
A high reporting rate is a stronger positive signal than a low click rate, because it measures an action that actually shortens an incident. Click rate measures failure on one simulation; reporting rate measures whether a genuine attack would surface fast enough to act on. Ignoring a phishing email is not a win — it leaves the attack running against everyone else.
Why it matters
Reporting is the only behavior in the whole category that directly reduces the cost of a real attack.
Hook Security’s position
Hook Security treats reporting rate as the primary program metric.
Vocabulary is the easy part. Behavior is the job.
Thirty minutes, a live account, and a straight answer about where your people actually stand.