BullPhish ID vs Living Security
BullPhish ID
bullphishid.com
Living Security
livingsecurity.comSide by side
| Figure | BullPhish ID | Living Security |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Plans published | 1 | 3 |
| Spec score · Security Awareness Training Software | 8.1 (#5) | 7.8 (#11) |
| Spec score · Cybersecurity Training Platforms | 8.0 (#8) | 7.7 (#15) |
| Compliance | The maker says the platform supports compliance requirements and can automatically send security-awareness training evidence to Compliance Manager GRC. | The training page says the training meets requirements for PCI, SOC, NIST, CMMC, HIPAA, FedRamp, and more. |
| Languages | The MSP product page says animated training videos are available in eight languages. | The security-awareness product page says training is available in 20 languages, while another product statement advertises 26 languages for campaign content. |
| Purpose | BullPhish ID combines security awareness training with realistic phishing simulations to reduce cyber risks caused by human error. | The security awareness training helps organizations train employees on individualized risks and meet compliance requirements. |
| Support | The maker directs customers to the ID Agent Helpdesk for support. | Company admins can book a support meeting Monday through Friday from 8 AM to 5 PM CST. |
| Training content | The platform offers cybersecurity courses on topics including data protection, password security, phishing awareness, and compliance practices. | The training page describes hundreds of professionally produced, plot-driven, live-action content modules. |
| What it does | BullPhish ID combines security awareness training with realistic phishing simulations to help reduce cyber risks caused by human error. | Living Security provides a human-risk management platform that combines security training, phishing data, identity information and behavioral signals to help organizations identify and reduce workforce risk. |
Plans
Living Security
- AdaptPriced on request
- EngagePriced on request
- TrainPriced on request
In their own words
BullPhish ID
BullPhish ID is a web-based platform that combines security-awareness training with simulated phishing campaigns. Courses address data protection, password security, phishing awareness, and compliance practices through animated videos and quizzes; organizations can also upload their own videos. Administrators can select preloaded phishing kits, customize messages and attachments, or build campaigns from blank templates. New kit content is added monthly. Campaigns can import organizations, groups, and contacts, run up to a year ahead, and randomize send times and phishing messages. Automated monthly and quarterly reports show organization and individual results, including employee actions and areas needing more training. Directory synchronization supports Microsoft Entra ID, Google Workspace, and IT Glue, with dynamic and nested groups in Entra ID and Google Workspace. Integrations include Graphus inbox delivery, KaseyaOne billing workflows, and Compliance Manager GRC evidence transfer. BullPhish ID requires two-factor setup with a compatible mobile authenticator and cannot synchronize with Microsoft 365 GCC High or DoD tenants.
Living Security
Living Security provides security awareness training for organizations that need individualized employee risk training and compliance support. Its platform includes hundreds of professionally produced, plot-driven live-action modules that can be tailored by role, industry, department, and specific risk area. Ready-to-use campaign templates, audience filters, and multi-campaign management support program administration. Training is available in 20 languages, with templates described in more than 26 languages. Microsoft Teams and Slack can deliver reminders and nudges. Risk mitigation reporting covers individual, team, and company levels. Living Security lists more than 160 native integrations, custom API endpoints, and CSV uploads, producing more than 300 Human Risk signals. The training page says requirements for PCI, SOC, NIST, CMMC, HIPAA, FedRamp, and more are met. Web access supports current Microsoft Edge and Google Chrome. Phishing simulations, risk scoring, automated training, SSO, and a phish reporting button are listed.