BullPhish ID vs Cofense PhishMe

BullPhish ID is a web-based platform that combines security-awareness training with simulated phishing campaigns. Courses address data protection, password security, phishing awareness, and compliance practices through animated videos and quizzes; organizations can also upload their own videos. Administrators can select preloaded phishing kits, customize messages and attachments, or build campaigns from blank templates. New kit content is added monthly. Campaigns can import organizations, groups, and contacts, run up to a year ahead, and randomize send times and phishing messages. Automated monthly and quarterly reports show organization and individual results, including employee actions and areas needing more training. Directory synchronization supports Microsoft Entra ID, Google Workspace, and IT Glue, with dynamic and nested groups in Entra ID and Google Workspace. Integrations include Graphus inbox delivery, KaseyaOne billing workflows, and Compliance Manager GRC evidence transfer. BullPhish ID requires two-factor setup with a compatible mobile authenticator and cannot synchronize with Microsoft 365 GCC High or DoD tenants.

Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can model smishing, vishing, and QR-code phishing to measure employee readiness and identify training gaps. Training content and reinforcement can be targeted to areas where employees need more practice. Reporting and analytics track performance and risk, while one-click reporting feeds a global intelligence network. PhishMe includes phishing simulations, risk scoring, a phish reporting button, and automated training. Data travels over HTTPS and is encrypted at rest using AES-256. Simulation data includes click-related statistics, while data entered by employees is not collected or stored. Controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. Cofense says its SOC 2 Type 2 certification covers PhishMe, with the report available through a sales representative under an NDA. Hosting locations include Ashburn, Montreal, Frankfurt, Sydney, and Tokyo; the Free edition is hosted only in Ashburn. The free plan costs nothing.