CyberPilot vs DarkPhish

CyberPilot is a web platform that brings security awareness training and phishing simulations together, with a focus on small and medium-sized companies. Its training includes more than 50 courses covering cybersecurity, GDPR, compliance, AI, and NIS2, along with training plans, reporting, and a branded platform. It creates customized phishing campaigns and reviews results to inform later campaigns. Reports can show opens, clicks, data submissions, and user behavior timelines. Automated user syncing and single sign-on are supported with Microsoft Entra ID and Google Workspace. With Entra ID integration and permissions configured, the platform can also pull Outlook-reported phishing events from Defender. CyberPilot advertises a 14-day free trial for awareness training without requiring a credit card, but has no free plan. The listed monthly plan is €13 a month for 1–20 users; the yearly plan is €13 a year for the same user range. CyberPilot says customer data is currently hosted and processed in AWS’s EU Frankfurt region while infrastructure migrates to Danish provider Scannet.

DarkPhish is a self-hosted platform for authorized phishing simulations, security-awareness training, internal security testing and defensive research. Users can prepare or import email templates, define approved recipients, schedule campaigns, monitor activity, review recipient timelines and export results. The free Community plan costs nothing and includes up to 100 managed users, one active campaign, a simulation engine, basic reporting and the core REST API. Paid plans start at €249/mo (annual). The platform lists API, Linux, self-hosted and web availability; its installer supports fresh systemd-based Linux deployments on amd64 and arm64. Supported databases include SQLite, MySQL/MariaDB and PostgreSQL. DarkPhish describes encrypted and signed browser sessions, scoped expiring API tokens, secrets hidden from normal API responses, and signed, hash-chained administrative audit records. Professional and Enterprise plans are in development, with further capabilities planned. The project states that the software is for authorized testing and simulations only.