Freedom251 › Cybersecurity Training Platforms
PhishingBox
What PhishingBox is
PhishingBox is a human risk management platform for phishing simulations and security awareness training. AI analytics and risk scoring help identify vulnerable users. Campaigns can use multi-stage email, callback, attachment, QR-code, and reply-to-only scenarios. Training includes scheduled learning, training moments, SCORM-ready content, and an included learning management system. The Standard plan costs $825 a year, billed at $16.50 per seat, with simulators, 70+ template languages, KillPhish, just-in-time training, integrations, and support. Professional costs $1,196.25 a year, billed at $23.93 per seat, adding an LMS, API, dedicated portal, custom courses, course library and store, and branding. Enterprise costs $1,567.50 a year, billed at $31.35 per seat, adding callback phishing, KillPhish AI, Security Inbox, and role-based leadership training. A 14-day trial is available, but there is no free plan. The web suite includes a RESTful API, 26 listed integrations, threat-reporting tools, optional multi-factor authentication, encrypted traffic and backups, and support by ticket, email, phone, and chat.
Who it suits
It suits organizations, audit and consulting firms, managed service companies, and white-label partners running phishing and awareness programs. It also fits teams needing API access, integrations, reporting, and multiple campaign types.
What it does well
- Multiple phishing simulation types
- AI analytics and risk scoring
- Included learning management system
- RESTful API
- 14-day trial available
What to know first
- No free plan
- Plans have annual costs
- Large seat counts require custom quote
- Leadership training capped at 5% of seats
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Professional | annual license; monthly invoicing available · Everything in Standard · LMS · API · dedicated training portal · custom course creation · course library/store · Cyber Fundamentals · comprehensive training · custom branding | $1,196.25 |
| Enterprise | annual license; monthly invoicing available · Everything in Professional · callback phishing · KillPhish AI · Security Inbox · leadership role-based training · SecurityTips | $1,567.50 |
| Standard | annual license; monthly invoicing available · Campaign Simulator · Phishing Simulator · Training Simulator · 70+ template languages · KillPhish · just-in-time training · integrations · email/live-chat/phone support | $825 |
As phishingbox.com lists them, read 15 Oct 2026. The maker's own page has the final word.
Verdict
PhishingBox combines phishing campaigns, training, analytics, reporting, integrations, and support across three paid plans. The 14-day trial allows evaluation, while advanced features and pricing depend on the selected tier.
Facts from PhishingBox's own pages
- AI integrations
- Enterprise accounts can connect OpenAI, Anthropic or Gemini for report summaries, KillPhish analysis and template translation; provider charges may apply. · support.phishingbox.com, 15 Oct 2026
- API
- The REST API can import targets, launch training or testing campaigns and retrieve reports for external workflows. · phishingbox.com, 15 Oct 2026
- API access condition
- Using the REST API requires an active PhishingBox account and generated API token sent in an api-token header. · support.phishingbox.com, 15 Oct 2026
- API versions
- PhishingBox recommends API v2, released in April 2020, and says its v2 documentation has broader endpoints than v1. · support.phishingbox.com, 15 Oct 2026
- Audience
- PhishingBox serves direct clients, third-party audit and consulting firms, managed service companies and white-label partners. · phishingbox.com, 30 Sept 2026
- Company facts
- LinkedIn lists PhishingBox as a privately held computer-and-network-security company founded in 2013 with 11–50 employees headquartered in Lexington, Kentucky. · linkedin.com, 15 Oct 2026
- Company history
- The platform originated in 2005 as a social-engineering testing tool and became a standalone company in 2016. · phishingbox.com, 30 Sept 2026
- Compliance
- Its Trust Center describes an independent SOC audit, GDPR work and an EU hosting instance for customers avoiding U.S. processing. · phishingbox.com, 30 Sept 2026
- Data residency
- Hosted regional instances are offered in Northern Virginia and Frankfurt for US or EU residency requirements. · phishingbox.com, 15 Oct 2026
- Documentation depth
- The support site exposes 293 indexed help articles covering campaigns, targets, safelisting, templates, reports, settings and account workflows. · phishingbox.com, 15 Oct 2026
- Founded
- 2016 · phishingbox.com, 28 Sept 2026
- Headquarters
- Lexington, Kentucky, United States · phishingbox.com, 28 Sept 2026
- Hosting
- Core products are a web-based suite hosted mainly in AWS, with email and landing-page processing in Lexington, Kentucky and Frankfurt, Germany. · phishingbox.com, 30 Sept 2026
- Human-risk scoring
- Employee risk scoring combines simulation results, training engagement, real-world behavior and inbox-reporting activity. · phishingbox.com, 15 Oct 2026
- Integrations
- Published integrations include Microsoft, Google Workspace, OpenAI, Anthropic, Litmos, Cornerstone, Bridge and Captivate, with additional directory, LMS, SIEM and HR connectors documented in the help center. · phishingbox.com, 15 Oct 2026
- KillPhish
- KillPhish lets Microsoft 365 and Google Workspace users report suspicious emails, while Microsoft users can scan messages for risk signals. · phishingbox.com, 15 Oct 2026
- Learning management
- Its built-in LMS assigns, tracks and reports training and supports SCORM-ready content. · phishingbox.com, 15 Oct 2026
- Legal name
- The privacy policy and subscription terms identify the provider as PhishingBox, LLC, a Kentucky limited-liability company. · phishingbox.com, 15 Oct 2026
- Licence
- The terms identify PhishingBox, LLC as the service provider and state that service content and related intellectual property belong to the company, licensors, affiliates or identified third parties; no open-source licence is published. · phishingbox.com, 15 Oct 2026
- Limit: interface
- Some reviewers say the user interface is confusing or difficult to handle. · softwareadvice.com, 15 Oct 2026
- Limit: price
- A reviewer described PhishingBox as more expensive than comparable tools. · softwareadvice.com, 15 Oct 2026
- Limit: reporting detail
- GetApp users rated real-time reporting 3.0 out of 5 from two ratings, lower than most other listed feature scores. · getapp.com, 15 Oct 2026
- Limit: templates
- Reviewers have asked for better template organization and upgrades to the template library. · softwareadvice.com, 15 Oct 2026
- Limit: training effort
- A Gartner Peer Insights reviewer said the training program can require substantial employee time and budget to maintain. · gartner.com, 15 Oct 2026
Where PhishingBox stands on Freedom251
- Cybersecurity Training Platforms#8 of 32