Cofense PhishMe vs Wizer

Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can model smishing, vishing, and QR-code phishing to measure employee readiness and identify training gaps. Training content and reinforcement can be targeted to areas where employees need more practice. Reporting and analytics track performance and risk, while one-click reporting feeds a global intelligence network. PhishMe includes phishing simulations, risk scoring, a phish reporting button, and automated training. Data travels over HTTPS and is encrypted at rest using AES-256. Simulation data includes click-related statistics, while data entered by employees is not collected or stored. Controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on. Cofense says its SOC 2 Type 2 certification covers PhishMe, with the report available through a sales representative under an NDA. Hosting locations include Ashburn, Montreal, Frankfurt, Sydney, and Tokyo; the Free edition is hosted only in Ashburn. The free plan costs nothing.

Wizer is a cloud-based platform for security awareness training and phishing simulations for organizations. Its training covers phishing, ransomware, compliance, GDPR, insider threats, AI and deepfake attacks, and secure code. WizerAI Studio can turn documents, policies, or topics into training videos; the product also includes deepfake awareness training and an interactive real-or-AI challenge. Boost adds adaptive phishing simulations, monthly updated templates, report buttons, course planning, analytics, and automated training assignment for developers. Teams can use Azure AD or Google Workspace for directory provisioning, Okta or OneLogin for single sign-on, and Zapier for integrations. SCORM packages support importing training into external LMS platforms, including Moodle, SAP Litmos, Docebo, and Blackboard. The Free Plan includes basic annual training, basic user management, limited reporting, and automatic learner reminders. Boost can be tried free for 10 days, including a phishing simulation. Its listed price is $25 per user per year on a three-year term for 25+ users; higher user thresholds have lower listed per-user prices, down to $8 for 3,001+ users.