This article discusses TokenFlare, a serverless framework for simulating phishing attacks on Entra ID and M365. It allows users to configure OAuth flows, deploy either locally or to Cloudflare, and includes built-in operational security features. The setup requires Python and Node.js, and it emphasizes authorized testing only.

This article offers a free phishing simulation service that tests employees using realistic attack tactics like email and SMS. The service is fully managed, requiring no setup from your team, and provides a clear report on employee interactions.