Skip to content
SPECIFICTION
Get listed

SANS Phishing Platform

sans.org

From $250/mo WebAPI
Visit sans.org
Spec score 7.9 #7 of 31 in Phishing Simulation Software

Spec sheet

What it does
SANS Phishing Platform runs simulated phishing campaigns to find employee risk, teach safer email behavior and reinforce awareness continuously.Read 15 Oct 2026 · sans.org
Purpose
The platform tests employees’ ability to withstand phishing and social engineering attacks.Read 5 Oct 2026 · sans.org
Intended users
SANS describes the platform as a way for organizations to train and test employees continuously and manage their phishing awareness programs.Read 5 Oct 2026 · sans.org
API
SANS states that its platform includes a full API for custom integrations.Read 15 Oct 2026 · assets.contentstack.io
Integrations
The platform offers prebuilt SSO, SMTP and Active Directory integrations.Read 15 Oct 2026 · assets.contentstack.io
Support
Standard support includes implementation webinars, FAQs, getting-started guides and email support; additional implementation guidance is available.Read 15 Oct 2026 · assets.contentstack.io
Headquarters
North Bethesda, Maryland, United StatesRead 28 Sep 2026 · sans.org
Founded
1989Read 28 Sep 2026 · sans.org
Company
SANS says it launched in 1989 as a cooperative for information security thought leadership.Read 5 Oct 2026 · sans.org
Access and license
Use is licensed for the subscription term and number of phishing named users stated in the customer’s price quote.Read 5 Oct 2026 · sans.org
Accessibility
SANS says its training was built with Section 508 and other accessibility frameworks in mind and that a VPAT is available on request.Read 15 Oct 2026 · assets.contentstack.io
Authorized testing
Customers may conduct simulated phishing only against domains and recipients for whom they have authorization.Read 5 Oct 2026 · sans.org
Campaign scheduling
The campaign wizard can schedule up to 12 months of continuous simulations using randomized templates and target groups.Read 5 Oct 2026 · sans.org
Company profile
LinkedIn lists SANS Institute as privately held, founded in 1989, headquartered in Rockville, Maryland, with 201–500 employees.Read 15 Oct 2026 · linkedin.com
Compliance alignment
SANS says regular awareness training can support PCI DSS, ISO 27001 and NIST objectives.Read 15 Oct 2026 · sans.org
Content customization limit
SANS says its videos are off-the-shelf and cannot be edited, although organizations can add branding, policies and homegrown material.Read 15 Oct 2026 · assets.contentstack.io
Executive reporting
Prebuilt C-suite reports present program results while protecting individual privacy, and administrators can create custom reports.Read 15 Oct 2026 · sans.org
Human detection
Human detection uses indicators such as mouse movement and mobile device motion to filter erroneous simulation failures.Read 5 Oct 2026 · sans.org
Legal maker
SANS identifies the legal entity as The Escal Institute of Advanced Technologies, Inc., doing business as SANS Institute.Read 15 Oct 2026 · sans.org
License model
The master agreement grants customers a limited, nonexclusive, nontransferable and nonsublicensable license during the subscription term.Read 15 Oct 2026 · sans.org
Limit: customization and scoring
G2's 2025 grid reports lower feature scores for white-labeling, customization and risk-scoring than category averages.Read 15 Oct 2026 · knowbe4.com
Limit: onboarding and support
Gartner includes a critical review alleging poor onboarding, slow implementation and difficulty obtaining SCORM guidance from support.Read 15 Oct 2026 · gartner.com
Limit: price
G2 reviews repeatedly describe SANS training as expensive or unaffordable compared with alternatives.Read 15 Oct 2026 · g2.com
Limit: usability
G2 reviewers report cumbersome multi-window viewing, learning-curve issues and some language limitations.Read 15 Oct 2026 · g2.com
Measurement method
SANS recommends tracking reporting and click rates, benchmarking, trends, real-world incidents and its Normalised Reporting Score and Human Risk Score.Read 15 Oct 2026 · sans.org
Metrics
Reporting covers simulation results, user interactions with business systems, and potential exposure to financial, personal, and business email compromise risks.Read 5 Oct 2026 · sans.org
Phishing tests
Administrators can use prebuilt campaigns or create customized phishing tests.Read 15 Oct 2026 · sans.org
Praise: ease of use
G2 reviewers commonly describe the platform as straightforward to set up and easy to use.Read 15 Oct 2026 · g2.com
Praise: instructors
Gartner reviewers praise SANS instructors as highly experienced and the training as hands-on.Read 15 Oct 2026 · gartner.com
Praise: practical learning
G2 reviewers praise practical simulations, clear video content and flexible training options.Read 15 Oct 2026 · g2.com
Product packaging
Phishing simulation can be bought separately or bundled with End User training, with a curated template library, playbook and false-positive filtering.Read 15 Oct 2026 · assets.contentstack.io
Program maturity
The phishing progression path is based on the SANS Security Awareness Maturity Model.Read 15 Oct 2026 · sans.org
Rating on G2
4.6 out of 5 from 35 reviewsRead 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.6 out of 5 from 101 reviewsRead 15 Oct 2026 · gartner.com
Rating on TrustRadius
8.0 out of 10 from count not stated on pageRead 15 Oct 2026 · trustradius.com
Remedial training
The service supports just-in-time lessons and automatic remedial courses after simulations.Read 15 Oct 2026 · sans.org
Reporting
It includes prebuilt stakeholder reports designed to discuss program metrics without compromising privacy, plus custom reports.Read 5 Oct 2026 · sans.org
Risk metrics
Reporting covers clicks, reports, financial and personal-data exposure, familiar-business-system interactions and business-email-compromise risk.Read 15 Oct 2026 · sans.org
SCORM and LMS
SANS training content is delivered in SCORM format for use in commercial LMS products, including customer-managed LMS deployments.Read 15 Oct 2026 · assets.contentstack.io
Security and privacy
SANS says it is ISO/IEC 27001:2022 certified and that its SOC 2 reports cover security, availability, confidentiality, processing integrity, and privacy; reports are available by contacting SANS.Read 5 Oct 2026 · sans.org
Target management
User targets can be synchronized from SANS LMS, Azure AD or other sources.Read 15 Oct 2026 · sans.org
Target syncing
Users can be synced from the SANS LMS, Azure AD, or other sources to keep the target list current.Read 5 Oct 2026 · sans.org
Template library
SANS supplies curated phishing templates in five difficulty levels and 33 languages.Read 15 Oct 2026 · sans.org
Templates
The product page lists expert-curated phishing templates in five difficulty tiers and 33 languages.Read 5 Oct 2026 · sans.org
Training
It offers preconfigured or customizable phishing tests, just-in-time training, and automated remedial courses.Read 5 Oct 2026 · sans.org

Plans and prices

Phishing Training (CIS Aggregate Buy, 2017) $3,000 a year 1-year price 1,200 users included · $2.50 per additional user · 2-year price $5,520 Read 15 Oct 2026 · sans.org
SANS Phishing Platform Priced on request Price and subscription limits are set out in a customer-specific quote. Read 5 Oct 2026 · sans.org
SANS Security Awareness / Phishing Price not published Annual subscription; quote required Pricing varies by users and selected features Read 15 Oct 2026 · g2.com

Every SANS Phishing Platform plan and price →

Where Specifiction places it

Alternatives to SANS Phishing PlatformAll alternatives →