After Open-Sourcing Shier: How Security Drills Can Still Land in Production

Many teams want phishing exercises but stall on two problems: standing up tooling, and producing results leadership can act on.

We open-sourced our internal drill platform, Shier. It extends Gophish with Chinese-first playbooks, department-level reporting, and non-email channels such as SMS and IM. The license is MIT.

Open source answers “do we have capable tooling?” It does not answer “who designs the exercise, reports to stakeholders, and carries contractual responsibility?”

EnsynTech is a services firm: security consulting, penetration testing, custom software, and project-based technical delivery. Shier demonstrates what we run in the field—it is not a self-serve subscription product.

You can self-host Shier on your own timeline, or engage Ensyn under a scoped services contract for drills, reporting, and optional pentest or consulting work. Paid engagements are deliverable-based services, not paid access to the repository.

For annual awareness or drill planning, reach us at ensyntech@outlook.com or https://ensyntech.com/.