Abstract: Systems, computer program products, and methods are described herein for the identification and monitoring of endpoint activity response. The present disclosure is configured to intercept a message via an input engine, forward the intercepted message data to an intelligence engine, train the intelligence engine to identify one or more security issues in the intercepted message data, generate a template of the message which emulates the message by removing one or more links or attached files, analyze the intercepted message data to determine one or more message characteristics related to a user, and trigger the dispatch of the message template and a gamification link to the intended recipient of the message via a new message.