Brightside AI vs Cofense PhishMe

Brightside AI is a web-based security awareness and attack simulation platform for organizations. Its simulations include phishing, voice phishing, combined voice-and-email attacks, and audio deepfakes; video deepfake exercises are offered as a managed service. AI can tailor attacks to employees' roles and context and generate spear-phishing scenarios. Training includes chat-based and gamified courses, with relevant micro-learning assignable after a failed simulation. Vishing campaigns can use live AI conversations, custom caller personas, multilingual voices, voice cloning, and hybrid email attacks. Reporting tracks actions such as opens, clicks, credential submissions, and reports, with custom reporting available. Google Workspace and Microsoft 365 integrations support deployment and automated user provisioning; custom HR connectors are available on demand. A Gmail add-on lets employees report suspicious email and accesses a message only when the employee chooses to report it. Brightside describes its operations as GDPR-compliant and individual employee results as sensitive data. The Start plan is free and includes courses; a free trial is available by request. Listed paid plan rates include €1 per month for standalone Vishing, €0.50 per seat per month for Basic, and €1.30 per seat per month for Pro.

Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can model smishing, vishing, and QR-code phishing to measure employee readiness and identify training gaps. Training content and reinforcement can be targeted to areas where employees need more practice. Reporting and analytics track performance and risk, while one-click reporting feeds a global intelligence network. PhishMe includes phishing simulations, risk scoring, a phish reporting button, and automated training. Data travels over HTTPS and is encrypted at rest using AES-256. Simulation data includes click-related statistics, while data entered by employees is not collected or stored. Controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. Cofense says its SOC 2 Type 2 certification covers PhishMe, with the report available through a sales representative under an NDA. Hosting locations include Ashburn, Montreal, Frankfurt, Sydney, and Tokyo; the Free edition is hosted only in Ashburn. The free plan costs nothing.