Do staff have to report emails to move up levels, or can they level up by just not clicking?

Users can level up by simply not clicking on phishing emails — this shows safe behavior. However, those who actively report suspicious emails through the CyberNut Add-On will level up faster, since the platform rewards proactive engagement and reporting accuracy.