Boxphish vs CyberHoot
Boxphish
boxphish.comCyberHoot
cyberhoot.comSide by side
| Figure | Boxphish | CyberHoot |
|---|---|---|
| Price from | £0.42/mo | $125/mo |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| Plans published | 3 | 1 |
| Spec score · Cybersecurity Training Platforms | 8.1 (#5) | 8.0 (#10) |
| Dark web monitoring | Enhanced includes ongoing monitoring for up to five domains, real-time credential monitoring, breach alerts, risk prioritisation and a secure password handling portal. | Dark Web Monitoring produces automated reports identifying exposed personal data and recommending urgent protective actions. |
| Founded | 2018 | 2014 |
| Headquarters | Leeds, England, United Kingdom | Hampton, New Hampshire, United States |
| Integrations | The pricing page lists Google and Microsoft Office 365 user syncing, single sign-on for Google and Microsoft Office, and a Microsoft Teams integration available as a bolt-on for Essentials and Enhanced. | CyberHoot integrates with EntraID and Google Workspace. |
| Purpose | Boxphish combines phishing simulations, training content and analytics to help organisations reduce cyber attack risk. | CyberHoot provides security awareness training designed to help users recognize phishing attempts and reduce human risk. |
Plans
In their own words
Boxphish
Boxphish combines phishing simulations, security training, and analytics to help organisations address cyber attack risk. Its library offers over 150 templates for B2B and B2C scenarios, and a builder supports custom simulations. Training uses short videos followed by quizzes or games, covering subjects such as phishing, malware, social engineering, GDPR, and data privacy. Dashboards report simulation outcomes, course completion, and risk scores, with detail by user, department, or location. Listed options include Google and Microsoft Office 365 user syncing and single sign-on for Google and Microsoft Office. A Microsoft Teams integration is available as a bolt-on for Essentials and Enhanced; it supports notifications, course access and completion in Teams, and progress syncing. Enhanced adds dark web and credential monitoring for up to five domains, breach alerts, risk prioritisation, and a secure password handling portal. Lite costs £5 per user per year and includes one admin, 12 simulations, and 12 training topics. Boxphish runs on Android, iOS, and web; AWS hosting and WCAG compliance are listed across all three plans.
CyberHoot
CyberHoot is a web-based security awareness training service focused on phishing recognition and reducing human risk. HootPhish uses interactive scenarios to teach six indicators of malicious emails; AttackPhish sends realistic phishing messages and ranks individual and team performance. Dark Web Monitoring generates reports about exposed personal data and recommends protective actions. Autopilot runs awareness programs with minimal oversight, without daily logins or manual sending. CyberHoot integrates with EntraID and Google Workspace, while its enterprise offering lists an API and integrations with enterprise software and security infrastructure. It serves individuals, MSPs, businesses, education institutions, enterprises and partners. Individual training is free and includes six foundational videos, monthly video training and quarterly HootPhish training. The service has a free plan and a 30-day trial. Autopilot costs $125 a month and includes 50 users; listed tiered pricing ranges from $2.50 user/mo at a 50-user minimum to $1.00/user/m. CyberHoot states that it complies with CCPA, GDPR, PIPEDA and the Australian Privacy Act.