Cofense PhishMe vs Living Security
Cofense PhishMe
cofense.com
Living Security
livingsecurity.comSide by side
| Figure | Cofense PhishMe | Living Security |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Plans published | 3 | 3 |
| Spec score · Security Awareness Training Software | 7.8 (#10) | 7.8 (#11) |
| Spec score · Cybersecurity Training Platforms | 7.7 (#13) | 7.7 (#15) |
| Integrations | Cofense describes PhishMe as part of its Technology Alliance Program, which integrates partner solutions for employee readiness, intelligence, and incident response. | Living Security advertises more than 160 native integrations spanning identity, email security, endpoint, HR and security operations tools. |
| Purpose | PhishMe uses phishing simulations to measure employee readiness, identify training gaps, and build secure behavior. | The security awareness training helps organizations train employees on individualized risks and meet compliance requirements. |
| Security certification | Cofense says its SOC 2 Type 2 certification covers PhishMe, and the report is available through a sales representative under an NDA. | Living Security states that its Teams product is SOC 2 Type 1 certified. |
| Support | Cofense lists customer support at [email protected] and offers product demonstrations by request. | Company admins can book a support meeting Monday through Friday from 8 AM to 5 PM CST. |
Plans
Cofense PhishMe
- Cofense PhishMe FreeFree
- Cofense PhishMe EnterprisePriced on request
- Cofense PhishMe Small Business Edition (SBE)Priced on request
Living Security
- AdaptPriced on request
- EngagePriced on request
- TrainPriced on request
In their own words
Cofense PhishMe
Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can model smishing, vishing, and QR-code phishing to measure employee readiness and identify training gaps. Training content and reinforcement can be targeted to areas where employees need more practice. Reporting and analytics track performance and risk, while one-click reporting feeds a global intelligence network. PhishMe includes phishing simulations, risk scoring, a phish reporting button, and automated training. Data travels over HTTPS and is encrypted at rest using AES-256. Simulation data includes click-related statistics, while data entered by employees is not collected or stored. Controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. Cofense says its SOC 2 Type 2 certification covers PhishMe, with the report available through a sales representative under an NDA. Hosting locations include Ashburn, Montreal, Frankfurt, Sydney, and Tokyo; the Free edition is hosted only in Ashburn. The free plan costs nothing.
Living Security
Living Security provides security awareness training for organizations that need individualized employee risk training and compliance support. Its platform includes hundreds of professionally produced, plot-driven live-action modules that can be tailored by role, industry, department, and specific risk area. Ready-to-use campaign templates, audience filters, and multi-campaign management support program administration. Training is available in 20 languages, with templates described in more than 26 languages. Microsoft Teams and Slack can deliver reminders and nudges. Risk mitigation reporting covers individual, team, and company levels. Living Security lists more than 160 native integrations, custom API endpoints, and CSV uploads, producing more than 300 Human Risk signals. The training page says requirements for PCI, SOC, NIST, CMMC, HIPAA, FedRamp, and more are met. Web access supports current Microsoft Edge and Google Chrome. Phishing simulations, risk scoring, automated training, SSO, and a phish reporting button are listed.