BullPhish ID vs Hackiwi

BullPhish ID is a web-based platform that combines security-awareness training with simulated phishing campaigns. Courses address data protection, password security, phishing awareness, and compliance practices through animated videos and quizzes; organizations can also upload their own videos. Administrators can select preloaded phishing kits, customize messages and attachments, or build campaigns from blank templates. New kit content is added monthly. Campaigns can import organizations, groups, and contacts, run up to a year ahead, and randomize send times and phishing messages. Automated monthly and quarterly reports show organization and individual results, including employee actions and areas needing more training. Directory synchronization supports Microsoft Entra ID, Google Workspace, and IT Glue, with dynamic and nested groups in Entra ID and Google Workspace. Integrations include Graphus inbox delivery, KaseyaOne billing workflows, and Compliance Manager GRC evidence transfer. BullPhish ID requires two-factor setup with a compatible mobile authenticator and cannot synchronize with Microsoft 365 GCC High or DoD tenants.

Hackiwi is a security platform for organisational training, phishing simulations, suspicious-message triage and exposure monitoring. Its video and written lessons include interactive knowledge checks; teams can assign learning paths and track completion. The public training library is free to browse without an account, and its content is licensed under CC-BY-4.0. Organisations with up to 20 users can use the full platform free. Phishing campaigns are available only to verified organisations and domains, and track opens, clicks and reports with safety gates and audit logs. Submitted credentials are not retained; only the event is recorded. Staff can forward suspicious messages from desktop or phone mail clients for automated classification and reputation checks. Exposure tools cover scope-locked OSINT, website scanning, dependency CVE tracking, domain monitoring and alerts for newly registered lookalike domains. Hackiwi runs on the web or on an organisation’s own infrastructure under AGPL-3.0. Its simulator is not offered to individuals or families, and organisations above 20 users pay for premium tooling.