BullPhish ID vs RansomLeak

BullPhish ID is a web-based platform that combines security-awareness training with simulated phishing campaigns. Courses address data protection, password security, phishing awareness, and compliance practices through animated videos and quizzes; organizations can also upload their own videos. Administrators can select preloaded phishing kits, customize messages and attachments, or build campaigns from blank templates. New kit content is added monthly. Campaigns can import organizations, groups, and contacts, run up to a year ahead, and randomize send times and phishing messages. Automated monthly and quarterly reports show organization and individual results, including employee actions and areas needing more training. Directory synchronization supports Microsoft Entra ID, Google Workspace, and IT Glue, with dynamic and nested groups in Entra ID and Google Workspace. Integrations include Graphus inbox delivery, KaseyaOne billing workflows, and Compliance Manager GRC evidence transfer. BullPhish ID requires two-factor setup with a compatible mobile authenticator and cannot synchronize with Microsoft 365 GCC High or DoD tenants.

RansomLeak provides security awareness training through interactive 3D simulations and a cloud learning management system. Its library has more than 200 exercises visitors can try without signing up, spanning security awareness, privacy and compliance, AI and LLM security, real-world incidents, application and API security, Git and repository security, and cloud security. Organizations can add custom content and uploaded materials, create role-based learning paths and campaigns, and use analytics, reminders, and compliance reports. Training can be exported as SCORM 1.2 or 2004 packages, or launched through LTI 1.3 with grade passback and roster sync. Deployment choices include multi-tenant cloud, dedicated private cloud, and on-premises installation, including air-gapped networks. The documented REST API uses scoped per-tenant tokens; webhooks use HMAC-SHA256 signatures and include retries and delivery logs. The maker says stored data uses AES-256 encryption and data in transit uses TLS 1.2+/1.3. Multi-tenant hosting is available in US or EU regions. The service is not HIPAA-covered, and customers are advised not to upload personal health information. Paid platform pricing is by custom quote.