Why we built TROY

Most phishing-awareness vendors optimize for vanity metrics — click rates, certificate counts, gamified leaderboards. The customers we worked with cared about something else: how does this number feed into our actual risk register, and how do we make sure the simulation itself doesn't tank our outbound mail reputation?

TROY was designed around three non-negotiables:

Who operates this infrastructure

The mail server you're talking to right now is operated directly by Lancelot Technologies. It is not a third-party SaaS reseller. The IP, the rDNS, the DKIM private key, and the abuse mailbox are all under our direct control. When something goes wrong, you talk to the people who built the system — not a tier-one queue in another time zone.

How simulations are authorized

Every campaign sent through TROY requires a signed authorization document from the target organization. Our operations team verifies the signing authority before any tenant is permitted to launch a live campaign. The consent record — including signer name, signing date, and document hash — is preserved alongside every send.

Lancelot Technologies does not run unsolicited phishing campaigns. We do not sell access to the mailing infrastructure to operators we have not vetted. This is the operating principle that lets us host this platform on a clean, well-reputed IP.

Where we're based

Lancelot Technologies is registered in Israel. Engineering and operations are headquartered in central Israel. Our parent site is at lancelotech.com.

How to reach us

For sales and demo requests, use the contact form. For abuse reports, write directly to abuse@troy-mail.com — that mailbox is monitored continuously and we respond within one business day.