CanIPhish vs SMARTFENSE Simulation Tools

CanIPhish provides phishing simulations and adaptive security awareness training for organizations. It supports email, voice, and web simulations, with more than 140 ready-to-go scenarios. Campaign templates can track clicks, credential entries, attachment opens, and replies, and support domain spoofing. The platform can generate customizable phishing websites by cloning templates or creating bespoke sites. Its AI voice-phishing capability can conduct dynamic conversations across languages, accents, and personas, and clone a voice from a short audio sample. Autonomous phishing mode uses OSINT, user context, and historical data to select content for each person and time. Integrations and add-ons include Microsoft Entra ID, Google Workspace, Gmail Report Phish, and Outlook Report Phish. The public API can read campaign results, human-risk scores, dark-web breaches, and domain-supply-chain posture, and manage campaigns, employee lists, content, and settings. The Free plan is free for up to 10 employees. Professional is listed at free with a minimum of 11 employees; Enterprise is free, annual only, with a minimum of 25 employees. It is available through web and API.

SMARTFENSE Simulation Tools is the simulation component of a SaaS security awareness platform. It covers phishing, ransomware, QR code, smishing, and USB drop campaigns. Users can edit simulation content or build scenarios from existing material or from scratch. Reports assess organizational vulnerability and changes in user behavior, while risk scores span users, groups, functional areas, hierarchical levels, and the organization. A Phishing Report Button lets users flag suspicious email for incident response review and records real-time metrics for reports of SMARTFENSE simulations. The product lists campaign automation, training content, SIEM export, and API access. Its documented REST API uses OAuth 2.0 and JSON for campaign results, risk scoring, and user management. Base integrations include Microsoft Entra ID, Google, Auth0, LDAP, and SAML 2.0; several other integrations are part of a separately contracted component. The SaaS service requires internet access, and its email and browsing domains must be allowlisted. Pricing is available on request.