Cofense PhishMe vs SentryMail
Cofense PhishMe
cofense.com
SentryMail
sentrymail.deSide by side
| Figure | Cofense PhishMe | SentryMail |
|---|---|---|
| Price from | Free | €0.83/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 3 | 12 |
| Spec score · Security Awareness Training Software | 7.8 (#10) | 8.8 (#2) |
| Headquarters | Arlington, Virginia, United States | The operator’s registered office is Lindental 8d, 94032 Passau, Germany. |
| Integrations | Cofense describes PhishMe as part of its Technology Alliance Program, which integrates partner solutions for employee readiness, intelligence, and incident response. | Documented connections include LDAP, Microsoft Entra ID, SCIM 2.0, OIDC, SAML, Splunk, Elasticsearch, Microsoft Sentinel and generic JSON. |
| Purpose | PhishMe uses phishing simulations to measure employee readiness, identify training gaps, and build secure behavior. | SentryMail is a self-hosted open-core platform for phishing awareness that lets teams plan, send, and evaluate simulated campaigns per recipient. |
| Reporting | It provides board-ready reporting and analytics to track performance, measure risk, and refine training. | The platform provides campaign reporting and analytics, including a dashboard risk score and CSV export of campaign results. |
| Support | Cofense lists customer support at [email protected] and offers product demonstrations by request. | Community users are directed to GitHub support, while Business includes email support. |
Plans
Cofense PhishMe
- Cofense PhishMe FreeFree
- Cofense PhishMe EnterprisePriced on request
- Cofense PhishMe Small Business Edition (SBE)Priced on request
SentryMail
- CommunityFree
- Business (2,501+ employees)€10 a year
- Business (1,001–2,500 employees)€11 a year
- Business (501–1,000 employees)€13 a year
- Enterprise (2,501+ employees)€14 a year
- Business (301–500 employees)€15 a year
- Business (151–300 employees)€18 a year
- Business (51–150 employees)€21 a year
- Business (25–50 employees)€25 a year
- Enterprise (25–50 employees)€35 a year
In their own words
Cofense PhishMe
Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can model smishing, vishing, and QR-code phishing to measure employee readiness and identify training gaps. Training content and reinforcement can be targeted to areas where employees need more practice. Reporting and analytics track performance and risk, while one-click reporting feeds a global intelligence network. PhishMe includes phishing simulations, risk scoring, a phish reporting button, and automated training. Data travels over HTTPS and is encrypted at rest using AES-256. Simulation data includes click-related statistics, while data entered by employees is not collected or stored. Controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. Cofense says its SOC 2 Type 2 certification covers PhishMe, with the report available through a sales representative under an NDA. Hosting locations include Ashburn, Montreal, Frankfurt, Sydney, and Tokyo; the Free edition is hosted only in Ashburn. The free plan costs nothing.
SentryMail
SentryMail is a self-hosted phishing-awareness platform for planning simulated campaigns and reviewing recipient-level responses. Teams can schedule campaigns, build them from HTML or Markdown templates, import .eml files, create landing pages, and track opens, clicks, and form submissions for each recipient. Reports include campaign analytics, a dashboard risk score, and CSV export. The Enterprise LMS adds self-hosted mandatory video training, automatic course assignments for low awareness scores, quizzes, and certificates. Listed integrations include LDAP, Microsoft Graph, SCIM 2.0, OIDC/SSO providers, and SMTP services. Enterprise adds SAML SSO, SIEM exports, and LMS xAPI export. Security measures listed include Argon2id passwords, encrypted secrets, two-factor authentication, audit logs, hardened containers, and hash-chained audit entries with an exportable evidence package. Community is free forever and self-hosted. Paid plans require at least 25 employees; Business and Enterprise license purchases are marked as coming soon. Installation documentation calls for Docker Compose and Linux with Docker Engine.