How to run internal phishing simulations for your organization (free & self-hosted)

A practical, ethics-first guide to running internal phishing simulations for your own employees — and doing the whole awareness loop (attack → report → train → measure) with a free, self-hosted open-source tool.