CanIPhish vs Hoxhunt

CanIPhish provides phishing simulations and adaptive security awareness training for organizations. It supports email, voice, and web simulations, with more than 140 ready-to-go scenarios. Campaign templates can track clicks, credential entries, attachment opens, and replies, and support domain spoofing. The platform can generate customizable phishing websites by cloning templates or creating bespoke sites. Its AI voice-phishing capability can conduct dynamic conversations across languages, accents, and personas, and clone a voice from a short audio sample. Autonomous phishing mode uses OSINT, user context, and historical data to select content for each person and time. Integrations and add-ons include Microsoft Entra ID, Google Workspace, Gmail Report Phish, and Outlook Report Phish. The public API can read campaign results, human-risk scores, dark-web breaches, and domain-supply-chain posture, and manage campaigns, employee lists, content, and settings. The Free plan is free for up to 10 employees. Professional is listed at free with a minimum of 11 employees; Enterprise is free, annual only, with a minimum of 25 employees. It is available through web and API.

Hoxhunt provides security awareness and phishing training for organizations seeking to reduce human cyber risk. Its simulations can reach employees by email, SMS, phone call or Teams and can reflect context such as department and location. Training combines short lessons and interactive exercises with automated enrollment, reminders and completion tracking. The library includes more than 300 modules and regulatory tracks for PCI DSS, HIPAA, DORA and GDPR. Content Studio turns organizational policies and existing materials into custom training in under 60 seconds; administrators can review and edit the result. Hoxhunt also clusters reported email threats and supports automated remediation integrations. It supports Microsoft Exchange environments, including on-premise and Microsoft 365, as well as Google Workspace. Sign-on options include Microsoft Entra ID, AD FS, Google Workspace, Okta, Ping Identity and OneLogin, plus other SAML 2.0-compatible providers. Supported environments vary by email provider and client; native Mail apps on Windows and macOS are unsupported, and Outlook mobile support is limited to Exchange Online users. Pricing is by employee and available on request.