Cofense Phishing Awareness Training vs SMARTFENSE Simulation Tools

Cofense Phishing Awareness Training is a paid web program founded in 2008 for organizations strengthening employee resilience to phishing. It uses real phishing data for adaptive simulations and awareness programs covering smishing, vishing, and QR-code phishing. One-click reporting sends employee reports into a global intelligence network. Board-ready reporting and analytics help track performance, measure risk, refine training, identify readiness gaps, and follow competency over time. Cofense says AI can accelerate campaign creation, tailor content, and deliver targeted reinforcement. Listed capabilities include campaign automation, a landing-page builder, risk scoring, and training content. The platform connects with existing organizational tools so intelligence and remediation can extend across the existing stack. Cofense describes Cofense PhishMe as having SOC 2 Type 2 certification for security, availability, and confidentiality. Its data-processing terms identify the customer as controller and Cofense as processor of customer personal data for the services. Pricing is not displayed; the product page offers a demo request. Support is available at [email protected].

SMARTFENSE Simulation Tools is the simulation component of a SaaS security awareness platform. It covers phishing, ransomware, QR code, smishing, and USB drop campaigns. Users can edit simulation content or build scenarios from existing material or from scratch. Reports assess organizational vulnerability and changes in user behavior, while risk scores span users, groups, functional areas, hierarchical levels, and the organization. A Phishing Report Button lets users flag suspicious email for incident response review and records real-time metrics for reports of SMARTFENSE simulations. The product lists campaign automation, training content, SIEM export, and API access. Its documented REST API uses OAuth 2.0 and JSON for campaign results, risk scoring, and user management. Base integrations include Microsoft Entra ID, Google, Auth0, LDAP, and SAML 2.0; several other integrations are part of a separately contracted component. The SaaS service requires internet access, and its email and browsing domains must be allowlisted. Pricing is available on request.