When I started building a phishing simulation platform in early 2022, I assumed the hard part would be the simulation engine — crafting realistic emails, tracking clicks, and generating reports. I was ...