Skip to content
SPECIFICTION
Get listed

Cofense PhishMe

cofense.com

Free plan Web
Visit cofense.com
Spec score 7.8 #10 of 30 in Security Awareness Training Software

What it is

Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can model smishing, vishing, and QR-code phishing to measure employee readiness and identify training gaps. Training content and reinforcement can be targeted to areas where employees need more practice. Reporting and analytics track performance and risk, while one-click reporting feeds a global intelligence network. PhishMe includes phishing simulations, risk scoring, a phish reporting button, and automated training. Data travels over HTTPS and is encrypted at rest using AES-256. Simulation data includes click-related statistics, while data entered by employees is not collected or stored. Controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. Cofense says its SOC 2 Type 2 certification covers PhishMe, with the report available through a sales representative under an NDA. Hosting locations include Ashburn, Montreal, Frankfurt, Sydney, and Tokyo; the Free edition is hosted only in Ashburn. The free plan costs nothing.

Spec sheet

Purpose
PhishMe uses phishing simulations to measure employee readiness, identify training gaps, and build secure behavior.Read 9 Oct 2026 · cofense.com
Audience
Cofense describes PhishMe as an enterprise-grade SaaS phishing simulation solution for organizations and says it serves customers across multiple industries and of all sizes.Read 9 Oct 2026 · cofense.com
Integrations
Cofense describes PhishMe as part of its Technology Alliance Program, which integrates partner solutions for employee readiness, intelligence, and incident response.Read 9 Oct 2026 · cofense.com
Support
Cofense lists customer support at [email protected] and offers product demonstrations by request.Read 9 Oct 2026 · cofense.com
Headquarters
Arlington, Virginia, United StatesRead 28 Sep 2026 · cofense.com
Access controls
Cofense says PhishMe provides role-based configuration, full auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on.Read 9 Oct 2026 · cofense.com
Data protection
PhishMe data is transmitted over HTTPS and encrypted at rest using AES-256; simulation data includes click-related statistics, while data entered by employees is not collected or stored.Read 9 Oct 2026 · cofense.com
Hosting
PhishMe is hosted on AWS in Ashburn, Montreal, Frankfurt, Sydney, and Tokyo, with the Free edition hosted only in Ashburn.Read 9 Oct 2026 · cofense.com
Reporting
It provides board-ready reporting and analytics to track performance, measure risk, and refine training.Read 9 Oct 2026 · cofense.com
Reporting workflow
The product page says one-click reporting feeds a global intelligence network.Read 9 Oct 2026 · cofense.com
Security certification
Cofense says its SOC 2 Type 2 certification covers PhishMe, and the report is available through a sales representative under an NDA.Read 9 Oct 2026 · cofense.com
Targeted learning
The platform can tailor content and deliver reinforcement based on where employees need more practice.Read 9 Oct 2026 · cofense.com
Threat-based training
Its simulations use real phishing data and can replicate smishing, vishing, and QR-code phishing.Read 9 Oct 2026 · cofense.com

Plans and prices

Cofense PhishMe Free Free No specific plan limits stated on the opened page Read 9 Oct 2026 · cofense.com
Cofense PhishMe Enterprise Priced on request No specific plan limits stated on the opened page Read 9 Oct 2026 · cofense.com
Cofense PhishMe Small Business Edition (SBE) Priced on request No specific plan limits stated on the opened page Read 9 Oct 2026 · cofense.com

Every Cofense PhishMe plan and price →

Strong points and limits

Strong points

  • Simulations cover smishing, vishing, and QR-code phishing
  • Training can target individual practice needs
  • Includes risk scoring and a phish reporting button
  • Data is encrypted at rest using AES-256
  • Enterprise supports SAML 2.0 single sign-on

Limits

  • Free edition is hosted only in Ashburn
  • SOC 2 Type 2 report requires an NDA

Who it suits

PhishMe suits organizations seeking phishing simulations and targeted security awareness training. Its listed reporting and access controls may be relevant to teams tracking employee readiness and managing platform access.

Verdict

PhishMe pairs varied phishing simulations with targeted training, reporting, and access controls. Pricing for paid editions is available on request, and the Free edition has a single listed hosting location.

Where Specifiction places it

Alternatives to Cofense PhishMeAll alternatives →