BullPhish ID vs SentryMail
BullPhish ID
bullphishid.com
SentryMail
sentrymail.deSide by side
| Figure | BullPhish ID | SentryMail |
|---|---|---|
| Price from | — | €0.83/mo |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 12 |
| Spec score · Security Awareness Training Software | 8.1 (#5) | 8.8 (#2) |
| Compliance | The maker says the platform supports compliance requirements and can automatically send security-awareness training evidence to Compliance Manager GRC. | SentryMail says it helps organizations document awareness training for NIS2 and lists a compliance center covering GDPR, NIS2, ISO 27001, BSI ORP.3, and § 38 BSIG. |
| Headquarters | Miami, Florida, USA | The operator’s registered office is Lindental 8d, 94032 Passau, Germany. |
| Purpose | BullPhish ID combines security awareness training with realistic phishing simulations to reduce cyber risks caused by human error. | SentryMail is a self-hosted open-core platform for phishing awareness that lets teams plan, send, and evaluate simulated campaigns per recipient. |
| Reporting | Automated monthly and quarterly reports show results at organization and individual-user levels, including employee actions and areas needing more training. | The platform provides campaign reporting and analytics, including a dashboard risk score and CSV export of campaign results. |
| Support | The maker directs customers to the ID Agent Helpdesk for support. | Community users are directed to GitHub support, while Business includes email support. |
| What it does | BullPhish ID combines security awareness training with realistic phishing simulations to help reduce cyber risks caused by human error. | SentryMail runs simulated phishing campaigns, records recipient actions and uses the results for awareness training. |
Plans
SentryMail
- CommunityFree
- Business (2,501+ employees)€10 a year
- Business (1,001–2,500 employees)€11 a year
- Business (501–1,000 employees)€13 a year
- Enterprise (2,501+ employees)€14 a year
- Business (301–500 employees)€15 a year
- Business (151–300 employees)€18 a year
- Business (51–150 employees)€21 a year
- Business (25–50 employees)€25 a year
- Enterprise (25–50 employees)€35 a year
In their own words
BullPhish ID
BullPhish ID is a web-based platform that combines security-awareness training with simulated phishing campaigns. Courses address data protection, password security, phishing awareness, and compliance practices through animated videos and quizzes; organizations can also upload their own videos. Administrators can select preloaded phishing kits, customize messages and attachments, or build campaigns from blank templates. New kit content is added monthly. Campaigns can import organizations, groups, and contacts, run up to a year ahead, and randomize send times and phishing messages. Automated monthly and quarterly reports show organization and individual results, including employee actions and areas needing more training. Directory synchronization supports Microsoft Entra ID, Google Workspace, and IT Glue, with dynamic and nested groups in Entra ID and Google Workspace. Integrations include Graphus inbox delivery, KaseyaOne billing workflows, and Compliance Manager GRC evidence transfer. BullPhish ID requires two-factor setup with a compatible mobile authenticator and cannot synchronize with Microsoft 365 GCC High or DoD tenants.
SentryMail
SentryMail is a self-hosted phishing-awareness platform for planning simulated campaigns and reviewing recipient-level responses. Teams can schedule campaigns, build them from HTML or Markdown templates, import .eml files, create landing pages, and track opens, clicks, and form submissions for each recipient. Reports include campaign analytics, a dashboard risk score, and CSV export. The Enterprise LMS adds self-hosted mandatory video training, automatic course assignments for low awareness scores, quizzes, and certificates. Listed integrations include LDAP, Microsoft Graph, SCIM 2.0, OIDC/SSO providers, and SMTP services. Enterprise adds SAML SSO, SIEM exports, and LMS xAPI export. Security measures listed include Argon2id passwords, encrypted secrets, two-factor authentication, audit logs, hardened containers, and hash-chained audit entries with an exportable evidence package. Community is free forever and self-hosted. Paid plans require at least 25 employees; Business and Enterprise license purchases are marked as coming soon. Installation documentation calls for Docker Compose and Linux with Docker Engine.