BullPhish ID vs ScamDrill
BullPhish ID
bullphishid.comScamDrill
scamdrill.comSide by side
| Figure | BullPhish ID | ScamDrill |
|---|---|---|
| Price from | — | $2.50/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | — | Yes |
| Plans published | 1 | 10 |
| Spec score · Cybersecurity Training Platforms | 8.0 (#8) | 8.6 (#3) |
| Compliance | The maker says the platform supports compliance requirements and can automatically send security-awareness training evidence to Compliance Manager GRC. | SOC 2 is listed as planned on the Trust Center; paid organization plans include audit reports exportable for frameworks including SOC 2, ISO 27001, and HIPAA. |
| Purpose | BullPhish ID combines security awareness training with realistic phishing simulations to reduce cyber risks caused by human error. | ScamDrill trains families and organizations to recognize scams through realistic, safe simulations and follow-up lessons. |
| Support | The maker directs customers to the ID Agent Helpdesk for support. | The Family plan includes priority support; organization Starter and Team list helpdesk support, and Enterprise lists priority support. |
| What it does | BullPhish ID combines security awareness training with realistic phishing simulations to help reduce cyber risks caused by human error. | ScamDrill provides safe simulated phishing training, scam checking and progress analytics for families and organizations. |
Plans
ScamDrill
- FreeFree
- FreeFree
- AI Analysis add-on$2.99 a month
- Family$9 a month
- AI Analysis add-on$29.99 a year
- Family$84 a year
- Starter$449 a year
- Team$1,499 a year
- Business$5,999 a year
- Enterprise$19,999 a year
In their own words
BullPhish ID
BullPhish ID is a web-based platform that combines security-awareness training with simulated phishing campaigns. Courses address data protection, password security, phishing awareness, and compliance practices through animated videos and quizzes; organizations can also upload their own videos. Administrators can select preloaded phishing kits, customize messages and attachments, or build campaigns from blank templates. New kit content is added monthly. Campaigns can import organizations, groups, and contacts, run up to a year ahead, and randomize send times and phishing messages. Automated monthly and quarterly reports show organization and individual results, including employee actions and areas needing more training. Directory synchronization supports Microsoft Entra ID, Google Workspace, and IT Glue, with dynamic and nested groups in Entra ID and Google Workspace. Integrations include Graphus inbox delivery, KaseyaOne billing workflows, and Compliance Manager GRC evidence transfer. BullPhish ID requires two-factor setup with a compatible mobile authenticator and cannot synchronize with Microsoft 365 GCC High or DoD tenants.
ScamDrill
ScamDrill trains families and organizations to recognize scams through simulated messages and follow-up lessons. Family exercises cover email and SMS, while organization simulations also include QR code scams. The exercises adapt to each learner’s performance, increasing difficulty as skills improve. A dashboard tracks progress, scam types caught and areas that may need more practice. Family members can forward suspicious emails or texts for AI analysis; this message-checking feature is included with the Family plan. Organizations can sync rosters with Okta, Azure AD and Google Workspace, and Enterprise includes a REST API and webhooks. ScamDrill says its data is encrypted in transit and at rest, with database-level tenant isolation and passkey-based two-factor authentication. It also says simulated landing pages do not capture, transmit or store what a learner types. The company says it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is listed as planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001 and HIPAA.