Cofense PhishMe vs PhishSkill
Cofense PhishMe
cofense.comPhishSkill
phishskill.comSide by side
| Figure | Cofense PhishMe | PhishSkill |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Plans published | 3 | 3 |
| Spec score · Cybersecurity Training Platforms | 7.7 (#13) | 8.1 (#6) |
| Access controls | Cofense says PhishMe provides role-based configuration, full auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. | Security controls include RBAC, session time-outs, bcrypt password hashing and administrative permission boundaries. |
| Purpose | PhishMe uses phishing simulations to measure employee readiness, identify training gaps, and build secure behavior. | PhishSkill is a security-awareness and phishing-simulation platform that helps organizations reduce human cyber risk. |
| Reporting | It provides board-ready reporting and analytics to track performance, measure risk, and refine training. | Dashboards and exports cover click rates, report rates, training completion and per-user or per-department risk metrics. |
| Support | Cofense lists customer support at [email protected] and offers product demonstrations by request. | The contact page says general support targets replies within 24 hours and provides a separate sales contact for enterprise plans. |
Plans
Cofense PhishMe
- Cofense PhishMe FreeFree
- Cofense PhishMe EnterprisePriced on request
- Cofense PhishMe Small Business Edition (SBE)Priced on request
In their own words
Cofense PhishMe
Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can model smishing, vishing, and QR-code phishing to measure employee readiness and identify training gaps. Training content and reinforcement can be targeted to areas where employees need more practice. Reporting and analytics track performance and risk, while one-click reporting feeds a global intelligence network. PhishMe includes phishing simulations, risk scoring, a phish reporting button, and automated training. Data travels over HTTPS and is encrypted at rest using AES-256. Simulation data includes click-related statistics, while data entered by employees is not collected or stored. Controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. Cofense says its SOC 2 Type 2 certification covers PhishMe, with the report available through a sales representative under an NDA. Hosting locations include Ashburn, Montreal, Frankfurt, Sydney, and Tokyo; the Free edition is hosted only in Ashburn. The free plan costs nothing.
PhishSkill
PhishSkill is a security-awareness and phishing-simulation platform for organizations seeking to reduce human cyber risk. It runs authorized simulations over email and WhatsApp, measures employee responses, and assigns short training based on risk profiles and simulation failures. Individual and departmental scores draw on simulation behavior, training engagement, and historical vulnerability. Dashboards track phishing clicks, successful reports, and training progress. Teams can be entered manually or imported by CSV, with role-based permissions. AI-generated templates work with OpenAI, Anthropic, or Google Gemini; customers can use PhishSkill’s AI on Premium or bring their own key on any plan. The managed cloud service requires no local installation. PhishSkill says it encrypts data at rest with AES-256 and in transit with TLS 1.2+, and hosts the service in India’s cloud region. Starter is free for 30 days, then billed per user monthly at an amount not listed. Premium is custom-priced, with volume discounts described. There is no free plan, and SSO support is listed as unavailable.