Insights from Pistachio
Research, guidance and news on phishing, security awareness and insider threats.
This is where Pistachio shares what we learn from running phishing simulations, training and insider threat detection across hundreds of organisations. Expect research, practical guidance for IT teams and MSPs, and news from the team.
New articles, reports and product updates published regularly.

New report - A Year of Phishing Behaviour in SMB and Mid-Market Organisations
12-month journey analysis for over 120,000 users across 600+ organisations
We believe in a learn-by-doing approach over snooze-worthy videos.
Instead, Pistachio tailors real-world scenarios so your team can build their cyber skills in a safe environment.



Building an Insider Threat Program Without a SOC
How to build an insider threat program that works without a dedicated security team

Behavioral Baselines: How AI Learns What Normal Looks Like
How behavioral AI learns what normal activity looks like to surface real threats

What is Insider Threat Detection? (And Why It's Not Surveillance)
Understand insider threats, why they happen, and how detection protects without invading employee privacy.

Protecting IP During High-Growth: Why Scaling SaaS Companies Can't Ignore Insider Risk
How scaling SaaS companies can reduce insider risk and protect IP

Insider Threat Scenarios You Can't Afford to Ignore
Three insider threat scenarios most organizations uncover only after damage is done

New Features: Canaries and Low-Risk Events
New in Pistachio Presence: A clearer view of what’s happening in your organization

You, Me, and Data Denormalization
How we twisted our view on what counts as stats and what counts as data, while being performant in postgres

Pistachio Presence: The New Era of Insider Threat Detection
Pistachio Presence: An AI-driven insider threat detection tool

If NHS cybersecurity keeps being treated like an IT problem, patients will die
12-month journey analysis for over 120,000 users across 600+ organisations