Boxphish vs PhishSkill

Boxphish combines phishing simulations, security training, and analytics to help organisations address cyber attack risk. Its library offers over 150 templates for B2B and B2C scenarios, and a builder supports custom simulations. Training uses short videos followed by quizzes or games, covering subjects such as phishing, malware, social engineering, GDPR, and data privacy. Dashboards report simulation outcomes, course completion, and risk scores, with detail by user, department, or location. Listed options include Google and Microsoft Office 365 user syncing and single sign-on for Google and Microsoft Office. A Microsoft Teams integration is available as a bolt-on for Essentials and Enhanced; it supports notifications, course access and completion in Teams, and progress syncing. Enhanced adds dark web and credential monitoring for up to five domains, breach alerts, risk prioritisation, and a secure password handling portal. Lite costs £5 per user per year and includes one admin, 12 simulations, and 12 training topics. Boxphish runs on Android, iOS, and web; AWS hosting and WCAG compliance are listed across all three plans.

PhishSkill is a security-awareness and phishing-simulation platform for organizations seeking to reduce human cyber risk. It runs authorized simulations over email and WhatsApp, measures employee responses, and assigns short training based on risk profiles and simulation failures. Individual and departmental scores draw on simulation behavior, training engagement, and historical vulnerability. Dashboards track phishing clicks, successful reports, and training progress. Teams can be entered manually or imported by CSV, with role-based permissions. AI-generated templates work with OpenAI, Anthropic, or Google Gemini; customers can use PhishSkill’s AI on Premium or bring their own key on any plan. The managed cloud service requires no local installation. PhishSkill says it encrypts data at rest with AES-256 and in transit with TLS 1.2+, and hosts the service in India’s cloud region. Starter is free for 30 days, then billed per user monthly at an amount not listed. Premium is custom-priced, with volume discounts described. There is no free plan, and SSO support is listed as unavailable.