Boxphish vs BullPhish ID

Boxphish combines phishing simulations, security training, and analytics to help organisations address cyber attack risk. Its library offers over 150 templates for B2B and B2C scenarios, and a builder supports custom simulations. Training uses short videos followed by quizzes or games, covering subjects such as phishing, malware, social engineering, GDPR, and data privacy. Dashboards report simulation outcomes, course completion, and risk scores, with detail by user, department, or location. Listed options include Google and Microsoft Office 365 user syncing and single sign-on for Google and Microsoft Office. A Microsoft Teams integration is available as a bolt-on for Essentials and Enhanced; it supports notifications, course access and completion in Teams, and progress syncing. Enhanced adds dark web and credential monitoring for up to five domains, breach alerts, risk prioritisation, and a secure password handling portal. Lite costs £5 per user per year and includes one admin, 12 simulations, and 12 training topics. Boxphish runs on Android, iOS, and web; AWS hosting and WCAG compliance are listed across all three plans.

BullPhish ID is a web-based platform that combines security-awareness training with simulated phishing campaigns. Courses address data protection, password security, phishing awareness, and compliance practices through animated videos and quizzes; organizations can also upload their own videos. Administrators can select preloaded phishing kits, customize messages and attachments, or build campaigns from blank templates. New kit content is added monthly. Campaigns can import organizations, groups, and contacts, run up to a year ahead, and randomize send times and phishing messages. Automated monthly and quarterly reports show organization and individual results, including employee actions and areas needing more training. Directory synchronization supports Microsoft Entra ID, Google Workspace, and IT Glue, with dynamic and nested groups in Entra ID and Google Workspace. Integrations include Graphus inbox delivery, KaseyaOne billing workflows, and Compliance Manager GRC evidence transfer. BullPhish ID requires two-factor setup with a compatible mobile authenticator and cannot synchronize with Microsoft 365 GCC High or DoD tenants.