CanIPhish vs Living Security
CanIPhish
caniphish.com
Living Security
livingsecurity.comSide by side
| Figure | CanIPhish | Living Security |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Plans published | 4 | 3 |
| Spec score · Phishing Simulation Software | 8.8 (#1) | 7.8 (#9) |
| Integrations | Documented integrations include Microsoft Entra ID, Google Workspace, Gmail and Outlook report-phish add-ons, Vanta, Drata and webhooks. | Living Security advertises more than 160 native integrations spanning identity, email security, endpoint, HR and security operations tools. |
| Public API | A version 3 REST-style API at api.caniphish.com/api/v3 exposes campaign, employee, content, reporting, settings and tenant operations. | The public API exposes Training endpoints for assignments, campaigns and participants, and a Unify endpoint for normalized identity data. |
| Purpose | CanIPhish provides AI-powered phishing simulations and adaptive security awareness training to build an organization’s human firewall. | The security awareness training helps organizations train employees on individualized risks and meet compliance requirements. |
| Rating on G2 | 0.0 out of 5 from 0 reviews. | 4.8 out of 5 from 6 reviews |
| Rating on Gartner Peer Insights | 4.0 out of 5 from 1 review. | 5.0 out of 5 from 3 ratings |
| What it does | CanIPhish is a cloud platform for simulated phishing, security-awareness training and human-risk measurement. | Living Security provides a human-risk management platform that combines security training, phishing data, identity information and behavioral signals to help organizations identify and reduce workforce risk. |
Plans
Living Security
- AdaptPriced on request
- EngagePriced on request
- TrainPriced on request
In their own words
CanIPhish
CanIPhish provides phishing simulations and adaptive security awareness training for organizations. It supports email, voice, and web simulations, with more than 140 ready-to-go scenarios. Campaign templates can track clicks, credential entries, attachment opens, and replies, and support domain spoofing. The platform can generate customizable phishing websites by cloning templates or creating bespoke sites. Its AI voice-phishing capability can conduct dynamic conversations across languages, accents, and personas, and clone a voice from a short audio sample. Autonomous phishing mode uses OSINT, user context, and historical data to select content for each person and time. Integrations and add-ons include Microsoft Entra ID, Google Workspace, Gmail Report Phish, and Outlook Report Phish. The public API can read campaign results, human-risk scores, dark-web breaches, and domain-supply-chain posture, and manage campaigns, employee lists, content, and settings. The Free plan is free for up to 10 employees. Professional is listed at free with a minimum of 11 employees; Enterprise is free, annual only, with a minimum of 25 employees. It is available through web and API.
Living Security
Living Security provides security awareness training for organizations that need individualized employee risk training and compliance support. Its platform includes hundreds of professionally produced, plot-driven live-action modules that can be tailored by role, industry, department, and specific risk area. Ready-to-use campaign templates, audience filters, and multi-campaign management support program administration. Training is available in 20 languages, with templates described in more than 26 languages. Microsoft Teams and Slack can deliver reminders and nudges. Risk mitigation reporting covers individual, team, and company levels. Living Security lists more than 160 native integrations, custom API endpoints, and CSV uploads, producing more than 300 Human Risk signals. The training page says requirements for PCI, SOC, NIST, CMMC, HIPAA, FedRamp, and more are met. Web access supports current Microsoft Edge and Google Chrome. Phishing simulations, risk scoring, automated training, SSO, and a phish reporting button are listed.