Run the Autopilot (COTM) Campaign report

Generate a client-ready report for a managed Campaign-of-the-Month simulation — results, email preview, training video, educational context, and an optional clicked-users list and note.

The Autopilot (Campaign-of-the-Month, or COTM) Campaign report turns a single managed monthly simulation into a polished, client-ready write-up. It pulls the template your users saw, the educational context behind the lure, the training video, and the live results — then lets you download a PDF or email it straight to stakeholders. You run it after a monthly Autopilot campaign completes, when you need to show an exec sponsor or a managed client exactly what was sent and how the team performed.

Before you start

Prerequisites

You're signed in to Hook as an org admin, with the right organization selected in the org switcher if you manage more than one.
Autopilot (COTM) is enabled for the organization. The report only exists when COTM is turned on — see Understand and set up Autopilot.
At least one Autopilot campaign has completed successfully for the org. Only campaigns with a successful result are selectable.

The card is hidden until Autopilot is on

On the Reports page, the COTM Campaign Report card appears only when Autopilot is enabled for the selected organization. If you don't see it, Autopilot either isn't on or you have a different org selected in the switcher. Check the org switcher first; Autopilot is turned on by your service provider, not from the org portal, so contact them if it isn't enabled.

Open the report

From the org portal, go to Reports and click the COTM Campaign Report card. (See Browse and run reports for the full report catalog.) You land on a campaign picker — you have to choose a specific completed campaign before Hook renders anything.

Reports catalog with the COTM Campaign Report card highlighted

Pick a completed campaign

The selection page lists every Autopilot campaign that completed successfully for your organization, newest first. Each row shows the campaign name, a Completed status pill, the scheduled date, and the theme tag (if the campaign had one).

Search if the list is long

Type in the Search campaigns box to filter by campaign name or theme. The list narrows as you type. Clear the box (the X on the right) to see everything again.

Click the campaign

Click any row to open its report. If no campaigns appear, you'll see No COTM campaigns available — that means no Autopilot campaign has completed successfully for this org yet.

Only successful runs show up

The picker lists campaigns that have a successful result recorded for this organization. A campaign that failed to send, or that ran for a different org in your tree, won't appear here.

COTM Campaign Report picker filtered to a completed campaign with date and theme tag

Read the report

The report opens with the campaign name as a subtitle and the following sections, top to bottom.

Results Summary

Four KPI tiles sit at the top:

Emails Sent — recipients targeted by the simulation.
Clicked — people who clicked the phishing link.
Reported — people who reported the email.
Click Rate — clicks as a percentage of emails sent, color-banded so it reads at a glance: green at 5% or under, amber from 5% up to 15%, and red above 15%.

These numbers come from PhishingBox, Hook's delivery and tracking backend.

If metrics can't be loaded

If Hook can't reach PhishingBox or the campaign has no metrics yet, the KPI grid is replaced by an amber banner: Campaign metrics are temporarily unavailable. Please try again later. The rest of the report (template preview, context, group participation) still renders — only the results numbers are affected. Reload the page later to try again.

Template Preview and Training Video

Side by side, the report shows:

Template Preview — a screenshot of the simulated phishing email your users received, captioned PREVIEW — Simulated phishing email sent to employees.
Training Video — the follow-up training clip for this theme. If the video is a YouTube or Vimeo link, it embeds inline and plays in place; otherwise you see a video placeholder. Either way, a Shareable link below it opens the video in a new tab. The Training Video card only appears when the campaign has a video.

COTM Campaign report showing the Template Preview card beside the Training Video card

Campaign Context

The educational "why" behind the lure: the scheduled date, an optional Description, the Theme badge, the Triggers the email used (the psychological hooks, shown as amber badges), and the Red Flags that should have tipped users off (listed with warning icons). These are read-only — they come from the campaign definition, not something you edit here.

Group Participation

A table of every group that was in scope, with an Included or Skipped status and, for skipped groups, the reason. A line above the table summarizes N of M groups participated. If there's no participation data, the section says so plainly.

Customize the export

Two controls let you tailor what goes into the PDF and email. Neither is saved — they live only in your current session and apply only to the export you generate right now. Reload the page and they reset.

Toggle "Users who Clicked"

The Users who Clicked card has a Hidden / Visible switch. Flip it to Visible and Hook fetches the individual people (name and email) who clicked the simulation. By default it's hidden, which keeps the report shareable without naming names. The toggle state carries into the PDF and email exports.

Add an optional note

The Notes card has a free-text box for commentary — context for the client, next steps, whatever you want on the report. It caps at 2,000 characters (a live counter shows how many you've used). The note is included in the PDF and email exports but is not saved — close the page and it's gone.

Regenerate the download with "Update PDF"

Whenever you turn on the clicked-users toggle or type a note, an Update PDF button appears in the report header. Click it to rebuild the downloadable version with your changes baked in; a PDF updated toast confirms. This step matters for the Export PDF download: until you click Update PDF, the downloaded file uses the last generated version — without your note or clicked-users list. The Email action regenerates the PDF server-side at send time, so it always reflects your current note and toggle even if you haven't clicked Update PDF.

Update PDF before you download

Your note and clicked-users toggle don't take effect in the downloaded PDF until you click Update PDF. Make your changes, click Update PDF, then use Export PDF. (Emailing the report picks up the latest note and toggle automatically.) If the button isn't showing, you haven't added a note or enabled the clicked-users list — the default report downloads as-is.

Download or email the report

The report header has two actions:

Export PDF renders the report to a PDF for offline sharing and downloads it to your device.
Email opens a dialog listing your organization's users. Search by name or email, tick recipients (or Select All), and click Send Report. Hook generates the PDF and emails it as an attachment.

Email limits

You can send to at most 100 recipients at once, and every recipient must belong to the target organization for this report — Hook only sends to users it can verify in that org. If you select more than 100, the send is rejected with an error.

Email Report dialog with user search, Select All, selected recipients, and Send Report action

Common pitfalls

No card on the Reports page. The COTM Campaign Report only shows when Autopilot is enabled for the currently selected org. Check the org switcher; if Autopilot still isn't on, contact your service provider, since it can't be enabled from the org portal.
No campaigns in the picker. Only campaigns that completed successfully for this org are listed. A brand-new or failed Autopilot run won't appear.
The KPI grid is missing. If you see the amber metrics temporarily unavailable banner instead of the four tiles, Hook couldn't pull live numbers from PhishingBox. The rest of the report is still accurate — reload later for the results.
Your note or clicked-users list isn't in the downloaded PDF. You forgot to click Update PDF before Export PDF. Both controls are export-only and unsaved, so regenerate before downloading. (Emailing the report includes them automatically.)