Boxphish vs Brightside AI

Boxphish combines phishing simulations, security training, and analytics to help organisations address cyber attack risk. Its library offers over 150 templates for B2B and B2C scenarios, and a builder supports custom simulations. Training uses short videos followed by quizzes or games, covering subjects such as phishing, malware, social engineering, GDPR, and data privacy. Dashboards report simulation outcomes, course completion, and risk scores, with detail by user, department, or location. Listed options include Google and Microsoft Office 365 user syncing and single sign-on for Google and Microsoft Office. A Microsoft Teams integration is available as a bolt-on for Essentials and Enhanced; it supports notifications, course access and completion in Teams, and progress syncing. Enhanced adds dark web and credential monitoring for up to five domains, breach alerts, risk prioritisation, and a secure password handling portal. Lite costs £5 per user per year and includes one admin, 12 simulations, and 12 training topics. Boxphish runs on Android, iOS, and web; AWS hosting and WCAG compliance are listed across all three plans.

Brightside AI is a web-based security awareness and attack simulation platform for organizations. Its simulations include phishing, voice phishing, combined voice-and-email attacks, and audio deepfakes; video deepfake exercises are offered as a managed service. AI can tailor attacks to employees' roles and context and generate spear-phishing scenarios. Training includes chat-based and gamified courses, with relevant micro-learning assignable after a failed simulation. Vishing campaigns can use live AI conversations, custom caller personas, multilingual voices, voice cloning, and hybrid email attacks. Reporting tracks actions such as opens, clicks, credential submissions, and reports, with custom reporting available. Google Workspace and Microsoft 365 integrations support deployment and automated user provisioning; custom HR connectors are available on demand. A Gmail add-on lets employees report suspicious email and accesses a message only when the employee chooses to report it. Brightside describes its operations as GDPR-compliant and individual employee results as sensitive data. The Start plan is free and includes courses; a free trial is available by request. Listed paid plan rates include €1 per month for standalone Vishing, €0.50 per seat per month for Basic, and €1.30 per seat per month for Pro.