SentryMail
SentryMail is a self-hosted, open-core platform for planning phishing-awareness campaigns and reviewing how recipients respond. Campaigns can be scheduled, use HTML or Markdown templates, or be created from imported .eml files. Landing pages and per-recipient tracking cover opens, clicks, and form submissions; reports include analytics, a risk score dashboard, and CSV export. Its Enterprise LMS supports mandatory video training hosted on the customer’s infrastructure, assigns courses automatically to people with low awareness scores, and includes quizzes and certificates. Integrations listed include LDAP, Microsoft Graph, SCIM 2.0, OIDC/SSO providers, and SMTP services. Enterprise adds SAML SSO, SIEM exports, and LMS xAPI export. Security features include Argon2id passwords, encrypted secrets, two-factor authentication, audit logging, and hardened containers. Community is free forever and self-hosted; paid plans require at least 25 employees, and Business and Enterprise license purchases are marked as coming soon. Installation documentation specifies Docker Compose and Linux with Docker Engine. The pricing note lists paid plans from €10/user/yr.
Who it is for
SentryMail suits organizations that want to run phishing simulations and training within their own infrastructure. Its paid plans are aimed at organizations with at least 25 employees.
What is good
- Free Community plan is self-hosted.
- Tracks recipient opens, clicks, and form submissions.
- Reports include analytics and CSV export.
- Enterprise LMS includes quizzes and certificates.
- Supports LDAP, Microsoft Graph, SCIM, and SSO.
What to know first
- Paid plans require at least 25 employees.
- Business and Enterprise license purchases are marked coming soon.
- Installation requires Linux with Docker Engine.
- Community support is through GitHub.
Verdict
SentryMail combines phishing simulations, response tracking, and training, with self-hosting available on its free Community plan. The 25-employee paid-plan minimum and coming-soon license purchases are important constraints for teams considering a paid tier.
SentryMail plans and pricing
All plansCompared on security awareness training software
- Free plan
- Yes
- Phishing simulations
- Yes
- Phish reporting button
- Yes
- Automated training
- Yes
- Risk scoring
- Yes
- SSO support
- Yes
