CyberPilot vs Gophish

CyberPilot is a web platform that brings security awareness training and phishing simulations together, with a focus on small and medium-sized companies. Its training includes more than 50 courses covering cybersecurity, GDPR, compliance, AI, and NIS2, along with training plans, reporting, and a branded platform. It creates customized phishing campaigns and reviews results to inform later campaigns. Reports can show opens, clicks, data submissions, and user behavior timelines. Automated user syncing and single sign-on are supported with Microsoft Entra ID and Google Workspace. With Entra ID integration and permissions configured, the platform can also pull Outlook-reported phishing events from Defender. CyberPilot advertises a 14-day free trial for awareness training without requiring a credit card, but has no free plan. The listed monthly plan is €13 a month for 1–20 users; the yearly plan is €13 a year for the same user range. CyberPilot says customer data is currently hosted and processed in AWS’s EU Frankfurt region while infrastructure migrates to Danish provider Scannet.

Gophish is an open-source framework for testing an organization's exposure to phishing through simulations. It is intended for penetration testers and businesses conducting real-world exercises. Users can create or import phishing templates and edit them in a browser-based HTML editor. Campaigns send emails in the background and can be scheduled. Results arrive near real time: recipient timelines show email opens, link clicks, and submitted credentials, and campaign results can be exported for reports. For programmatic work, Gophish provides a REST API and a Python client. It can run from a downloaded binary or the official Docker container, across API, Linux, macOS, self-hosted, and Windows environments. The Gophish Community Edition repository includes an MIT License, permitting use, copying, modification, distribution, and sale subject to its terms. The plan is free at free. Listed attachment tracking covers docx, docm, pptx, xlsx, xlsm, txt, html, and ics files. Version 0.12.1 added configurable trusted origins to the CSRF handler for configurations where TLS terminates at an upstream load balancer.