Skip to content
SPECIFICTION
Get listed

SentryMail

sentrymail.de

From €0.83/mo Free plan Open source WebLinuxAPISelf-hostedBrowser extension
Visit sentrymail.de
Spec score 8.8 #2 of 30 in Security Awareness Training Software

What it is

SentryMail is a self-hosted phishing-awareness platform for planning simulated campaigns and reviewing recipient-level responses. Teams can schedule campaigns, build them from HTML or Markdown templates, import .eml files, create landing pages, and track opens, clicks, and form submissions for each recipient. Reports include campaign analytics, a dashboard risk score, and CSV export. The Enterprise LMS adds self-hosted mandatory video training, automatic course assignments for low awareness scores, quizzes, and certificates. Listed integrations include LDAP, Microsoft Graph, SCIM 2.0, OIDC/SSO providers, and SMTP services. Enterprise adds SAML SSO, SIEM exports, and LMS xAPI export. Security measures listed include Argon2id passwords, encrypted secrets, two-factor authentication, audit logs, hardened containers, and hash-chained audit entries with an exportable evidence package. Community is free forever and self-hosted. Paid plans require at least 25 employees; Business and Enterprise license purchases are marked as coming soon. Installation documentation calls for Docker Compose and Linux with Docker Engine.

Spec sheet

What it does
SentryMail runs simulated phishing campaigns, records recipient actions and uses the results for awareness training.Read 15 Oct 2026 · sentrymail.de
Purpose
SentryMail is a self-hosted open-core platform for phishing awareness that lets teams plan, send, and evaluate simulated campaigns per recipient.Read 30 Sep 2026 · docs.sentrymail.de
Deployment
The official installation guide describes a Docker Compose stack and lists Linux with Docker Engine as its operating-system requirement.Read 30 Sep 2026 · docs.sentrymail.de
API
The documentation exposes API routes including an evidence-package endpoint at GET /audit-events/evidence-package.Read 15 Oct 2026 · docs.sentrymail.de
Integrations
Documented connections include LDAP, Microsoft Entra ID, SCIM 2.0, OIDC, SAML, Splunk, Elasticsearch, Microsoft Sentinel and generic JSON.Read 15 Oct 2026 · docs.sentrymail.de
Security
The maker’s documentation lists Argon2id passwords, secrets encrypted at rest, two-factor authentication with backup codes, audit logging, and hardened containers.Read 30 Sep 2026 · docs.sentrymail.de
Privacy
The maker says SentryMail is GDPR-compliant, minimizes personal data, supports pseudonymized reporting, and can run fully within the customer’s infrastructure.Read 30 Sep 2026 · sentrymail.de
Compliance
SentryMail says it helps organizations document awareness training for NIS2 and lists a compliance center covering GDPR, NIS2, ISO 27001, BSI ORP.3, and § 38 BSIG.Read 30 Sep 2026 · sentrymail.de
Support
Community users are directed to GitHub support, while Business includes email support.Read 15 Oct 2026 · sentrymail.de
Headquarters
The operator’s registered office is Lindental 8d, 94032 Passau, Germany.Read 15 Oct 2026 · sentrymail.de
Maker
The legal notice identifies SecureBits Cyber Security UG (in formation), represented by Aurel Louis Hintzen, with a registered office in Passau, Germany.Read 30 Sep 2026 · sentrymail.de
AI integration
The AI feature accepts any OpenAI-compatible endpoint, including OpenAI, Azure, Mistral, Groq, OpenRouter, Ollama, vLLM and LM Studio.Read 15 Oct 2026 · docs.sentrymail.de
Architecture
The stack uses FastAPI, React/Vite/TypeScript, PostgreSQL, Redis, Caddy and rootless Docker Compose.Read 15 Oct 2026 · docs.sentrymail.de
Campaign features
Campaigns support scheduling, HTML or Markdown templates, EML imports, landing pages and recipient-level tracking.Read 15 Oct 2026 · docs.sentrymail.de
Campaigns
Campaigns support scheduling, HTML or Markdown templates, .eml import, landing pages, and per-recipient tracking of opens, clicks, and form submissions.Read 30 Sep 2026 · docs.sentrymail.de
Company legal name
The legal notice identifies SecureBits Cyber Security UG (limited liability) in formation as the operator.Read 15 Oct 2026 · sentrymail.de
Data residency
The product is designed to run entirely on the operator’s infrastructure without vendor telemetry or cloud dependency.Read 15 Oct 2026 · docs.sentrymail.de
Developer identity
The securebitsorg GitHub profile says Marcel Dellmann develops the SentryMail application as a realistic phishing-simulation and awareness-training server.Read 15 Oct 2026 · github.com
Enterprise integrations
Enterprise supports SAML SSO, SIEM export to Splunk HEC, Elasticsearch, Microsoft Sentinel or JSON, and LMS xAPI export to a Learning Record Store.Read 30 Sep 2026 · sentrymail.de
Evidence chain
Audit entries are linked with SHA-256 hashes and can be exported as a verifiable evidence package.Read 15 Oct 2026 · docs.sentrymail.de
Evidence integrity
The Core feature list describes hash chaining of audit entries using SHA-256 and an exportable evidence package with a standalone verifier.Read 30 Sep 2026 · sentrymail.de
Installation
Installation is provided through an interactive install.sh script or manual Docker Compose commands.Read 15 Oct 2026 · github.com
Licence
The core is open source under the Mozilla Public License 2.0, while Business and Enterprise add-ons are proprietary.Read 15 Oct 2026 · docs.sentrymail.de
Limit: minimum size
Paid subscriptions require a minimum order of 25 employees.Read 15 Oct 2026 · sentrymail.de
Limit: open tracking
The repository warns that many mail clients block tracking pixels, making clicks more reliable than opens.Read 15 Oct 2026 · github.com
Limit: paid availability
The pricing page says Business and Enterprise purchasing is coming soon.Read 15 Oct 2026 · sentrymail.de
Notable feature news
The official homepage labels the automated mandatory-training LMS as a new Enterprise feature.Read 15 Oct 2026 · sentrymail.de
Notable limits
The pricing page states a 25-employee minimum for paid plans and says Business and Enterprise licenses will be available soon.Read 30 Sep 2026 · sentrymail.de
Other channels
Simulations can use SMS gateways, Matrix, Nextcloud Talk and planted USB media.Read 15 Oct 2026 · docs.sentrymail.de
Paid licensing dependency
Paid add-ons require periodic online licence leases and cannot operate indefinitely on a permanently disconnected installation.Read 15 Oct 2026 · docs.sentrymail.de
Reporting
The platform provides campaign reporting and analytics, including a dashboard risk score and CSV export of campaign results.Read 30 Sep 2026 · sentrymail.de
Repository activity
The public GitHub repository shows 515 commits, three stars and zero forks on the opened page.Read 15 Oct 2026 · github.com
Representative
The legal notice names Aurel Louis Hintzen as the company representative.Read 15 Oct 2026 · sentrymail.de
Risk management
Dashboards provide funnel metrics, activity heatmaps, a 0–100 risk score and human-risk rankings.Read 15 Oct 2026 · docs.sentrymail.de
SDKs
The opened documentation describes HTTP APIs and integrations but does not identify an official SDK.Read 15 Oct 2026 · docs.sentrymail.de
Security assessment limit
The vendor states its security overview is a self-assessment with no external penetration test, certification or attestation.Read 15 Oct 2026 · docs.sentrymail.de
Security controls
Passwords use Argon2id, runtime secrets use Fernet encryption at rest, and two-factor authentication supports backup codes.Read 15 Oct 2026 · docs.sentrymail.de
System requirements
The repository recommends Linux with Docker Engine 24 or newer and Docker Compose v2, with at least 2 vCPU, 2 GB RAM and 15 GB SSD.Read 15 Oct 2026 · github.com
Tracking
The system records opens, clicks and form submissions with session history and engagement context.Read 15 Oct 2026 · docs.sentrymail.de
Training
Its Enterprise LMS supports self-hosted mandatory video training, automatic course assignment for low awareness scores, quizzes, and audit-proof certificates.Read 30 Sep 2026 · sentrymail.de
Training LMS
Enterprise can assign self-hosted video courses after low simulation scores and issue quiz-gated certificates.Read 15 Oct 2026 · sentrymail.de

Plans and prices

Community Free forever, self-hosted open-source core · self-hosting · GitHub community support Read 15 Oct 2026 · sentrymail.de
Business (2,501+ employees) €10 a year annual subscription per employee tiered by employee count Read 15 Oct 2026 · sentrymail.de
Business (1,001–2,500 employees) €11 a year annual subscription per employee tiered by employee count Read 15 Oct 2026 · sentrymail.de
Business (501–1,000 employees) €13 a year annual subscription per employee tiered by employee count Read 15 Oct 2026 · sentrymail.de
Enterprise (2,501+ employees) €14 a year annual subscription per employee Business plus 40% · white-label · SAML SSO · SIEM export · AI risk scoring Read 15 Oct 2026 · sentrymail.de
Business (301–500 employees) €15 a year annual subscription per employee tiered by employee count Read 15 Oct 2026 · sentrymail.de
Business (151–300 employees) €18 a year annual subscription per employee tiered by employee count Read 15 Oct 2026 · sentrymail.de
Business (51–150 employees) €21 a year annual subscription per employee tiered by employee count · minimum 25 employees Read 15 Oct 2026 · sentrymail.de
Business (25–50 employees) €25 a year annual subscription per employee minimum 25 employees · advanced simulations · reporting and analytics · email support Read 15 Oct 2026 · sentrymail.de
Enterprise (25–50 employees) €35 a year annual subscription per employee Business plus 40% · minimum 25 employees · only with Business Read 15 Oct 2026 · sentrymail.de
Business Price not published from €10 / employee / year; annual subscription, tiered by employee count Minimum 25 employees · advanced phishing simulations and campaigns · reporting and analytics · email support · license purchase marked “Coming soon” Read 30 Sep 2026 · sentrymail.de
Enterprise Price not published from €14 / employee / year; Business plus 40%, annual subscription Only available as an upgrade to Business · minimum 25 employees · white-label and SAML SSO · SIEM export · AI risk scoring and automated campaigns · license purchase marked “Coming soon” Read 30 Sep 2026 · sentrymail.de

Every SentryMail plan and price →

Strong points and limits

Strong points

  • Tracks opens, clicks, and form submissions per recipient
  • Includes campaign analytics, risk scoring, and CSV export
  • Enterprise LMS offers quizzes and training certificates
  • Community plan is free forever and self-hosted
  • Lists LDAP, Microsoft Graph, SCIM, and SSO integrations

Limits

  • Paid plans require at least 25 employees
  • Business and Enterprise licenses are marked coming soon
  • Installation requirements specify Linux with Docker Engine

Who it suits

SentryMail suits teams that want to run phishing simulations and awareness training on their own infrastructure. Its paid plans target organizations with at least 25 employees that need expanded reporting, support, or enterprise integrations.

Verdict

SentryMail combines phishing simulations, recipient-level reporting, and training tools, with self-hosting as a central deployment option. Check the employee minimum and license availability before planning a paid deployment.

Where Specifiction places it

Alternatives to SentryMailAll alternatives →