CyberHoot vs DarkPhish

CyberHoot is a web-based security awareness training service focused on phishing recognition and reducing human risk. HootPhish uses interactive scenarios to teach six indicators of malicious emails; AttackPhish sends realistic phishing messages and ranks individual and team performance. Dark Web Monitoring generates reports about exposed personal data and recommends protective actions. Autopilot runs awareness programs with minimal oversight, without daily logins or manual sending. CyberHoot integrates with EntraID and Google Workspace, while its enterprise offering lists an API and integrations with enterprise software and security infrastructure. It serves individuals, MSPs, businesses, education institutions, enterprises and partners. Individual training is free and includes six foundational videos, monthly video training and quarterly HootPhish training. The service has a free plan and a 30-day trial. Autopilot costs $125 a month and includes 50 users; listed tiered pricing ranges from $2.50 user/mo at a 50-user minimum to $1.00/user/m. CyberHoot states that it complies with CCPA, GDPR, PIPEDA and the Australian Privacy Act.

DarkPhish is a self-hosted platform for authorized phishing simulations, security-awareness training, internal security testing and defensive research. Users can prepare or import email templates, define approved recipients, schedule campaigns, monitor activity, review recipient timelines and export results. The free Community plan costs nothing and includes up to 100 managed users, one active campaign, a simulation engine, basic reporting and the core REST API. Paid plans start at €249/mo (annual). The platform lists API, Linux, self-hosted and web availability; its installer supports fresh systemd-based Linux deployments on amd64 and arm64. Supported databases include SQLite, MySQL/MariaDB and PostgreSQL. DarkPhish describes encrypted and signed browser sessions, scoped expiring API tokens, secrets hidden from normal API responses, and signed, hash-chained administrative audit records. Professional and Enterprise plans are in development, with further capabilities planned. The project states that the software is for authorized testing and simulations only.