Instead of Gophish
Gophish alternatives
Gophish gives pentesters and businesses a free, open-source framework for phishing simulations. Teams can create or import templates in its browser-based HTML editor, schedule campaigns, and follow opens, clicks, and submitted credentials in recipient timelines. Results arrive near real time and can be exported, while a REST API and Python client support integrations. It runs from a binary or the official Docker container across Linux, macOS, and Windows, and can be self-hosted.
- 1
Wizer
Free plan AndroidAPIiPhone+1Organizations combining phishing simulations with broad awareness training — Wizer adds cloud-based courses, adaptive simulations, AI training tools, and LMS support to Gophish’s simulation-focused toolkit.
Free plan · paid from $8/user/yr · 10-day trial Visit site - 2
DarkPhish
Free plan Open source APILinuxSelf-hosted+1Teams wanting self-hosted simulations with audit controls — DarkPhish adds signed audit events, scoped expiring API tokens, and write-only secrets to a self-hosted campaign workflow.
Free plan · paid from €249/mo (annual) Visit site - 3
SentryMail
Free plan Open source APIExtensionLinux+2Teams needing self-hosted awareness training and campaign analytics — SentryMail adds an LMS, risk scoring, enterprise integrations, and per-recipient campaigns with HTML or Markdown templates and .eml import.
Free plan · paid from €10/user/yr Visit site - 4
Cofense PhishMe
Free plan WebOrganizations focused on threat-based employee readiness — PhishMe adds threat-based smishing, vishing, and QR-code exercises, targeted reinforcement, and board-ready analytics.
Pricing on request Visit site - 5
Hackiwi
Free plan Self-hostedWebTeams combining simulations, report triage, and exposure tools — Hackiwi adds suspicious-message triage and exposure tooling, while recording credential-submission events without storing credentials.
Free plan Visit site - 6
RansomLeak
Free plan APISelf-hostedWebOrganizations seeking broad interactive security training — RansomLeak centers on interactive 3D training and a cloud LMS, with SCORM and LTI exports rather than a phishing-campaign workflow.
Pricing on request Visit site - 7
Hoxhunt
Paid AndroidiPhoneMac+2Organizations wanting adaptive multichannel security awareness — Hoxhunt adds personalized email, SMS, phone, and Teams simulations, a large training library, and reported-threat remediation workflows.
- 8
CanIPhish
Free plan APIExtensionWeb - 9
CyberHoot
Free plan Web - 10
- 11
Breach Secure Now
Free trial Web - 12
Huntress Security Awareness Training
Free trial Web - 13
Infosec IQ
Paid AndroidAPIiPhone+1 - 14
Cofense Phishing Awareness Training
Paid Web - 15
Hook Security
Paid APIWeb - 16
Keepnet Phishing Simulator
Paid APIWeb - 17
Living Security
Paid APIWeb - 18
MetaCompliance
Paid WebWindows - 19
SMARTFENSE Simulation Tools
Paid AndroidAPIiPhone+4 - 20
uPhish
Free trial Web - 21
- 22
Shirudo
Paid AndroidiPhoneWeb - 23
SANS Phishing Platform
Paid APIWeb - 24
NINJIO
Paid Web - 25
Phished
Paid Web - 26
SoSafe
Paid Web - 27
- 28
Fortra Security Awareness Training
Paid Web - 29
Microsoft Sentinel
Paid Web - 30
Mimecast Engage
Paid Web
Its focus is campaign simulation, so teams seeking structured awareness courses, broader employee reporting workflows, or exposure monitoring may prefer another fit. Alternatives also vary in delivery: some are cloud platforms, while others emphasize customer-controlled hosting. Compare how each handles training, integrations, campaign reporting, and employee-submitted data. Price and platform coverage matter too: Gophish has a free plan, while alternatives range from free plans to paid pricing on request. Decide whether its direct simulation workflow is enough or whether your program needs the additional training and response functions offered elsewhere.
← Back to Gophish The whole phishing simulation software list