DarkPhish vs SentryMail
DarkPhish
darkphish.sk
SentryMail
sentrymail.deSide by side
| Figure | DarkPhish | SentryMail |
|---|---|---|
| Price from | Free | €0.83/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | Yes |
| Web | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 12 |
| Spec score · Security Awareness Training Software | 8.8 (#1) | 8.8 (#2) |
| Installation | The installer detects Linux distribution and CPU architecture, installs dependencies and creates a hardened systemd service. | Installation is provided through an interactive install.sh script or manual Docker Compose commands. |
| Licence | DarkPhish is distributed under the MIT License and derives from Gophish with original notices preserved. | The core is open source under the Mozilla Public License 2.0, while Business and Enterprise add-ons are proprietary. |
| Limit: paid availability | Professional and Enterprise editions are described as still in development rather than generally available. | The pricing page says Business and Enterprise purchasing is coming soon. |
| Maker | The website credits DarkArmy and fsociety as DarkPhish developers. | The legal notice identifies SecureBits Cyber Security UG (in formation), represented by Aurel Louis Hintzen, with a registered office in Passau, Germany. |
| Purpose | DarkPhish is a free platform for authorized phishing simulations, security-awareness training, internal security testing, and defensive research. | SentryMail is a self-hosted open-core platform for phishing awareness that lets teams plan, send, and evaluate simulated campaigns per recipient. |
| Repository activity | The public GitHub repository reports 1,018 commits, zero stars and zero forks on the opened repository page. | The public GitHub repository shows 515 commits, three stars and zero forks on the opened page. |
| Support | Bug reports, questions and feature requests are directed to GitHub Issues, while vulnerabilities use a private reporting channel. | Community users are directed to GitHub support, while Business includes email support. |
| System requirements | Documented fresh installations require systemd-based Linux on amd64 or arm64. | The repository recommends Linux with Docker Engine 24 or newer and Docker Compose v2, with at least 2 vCPU, 2 GB RAM and 15 GB SSD. |
| What it does | DarkPhish is a free platform for authorized phishing simulations, security-awareness training, internal security testing and defensive research. | SentryMail runs simulated phishing campaigns, records recipient actions and uses the results for awareness training. |
Plans
SentryMail
- CommunityFree
- Business (2,501+ employees)€10 a year
- Business (1,001–2,500 employees)€11 a year
- Business (501–1,000 employees)€13 a year
- Enterprise (2,501+ employees)€14 a year
- Business (301–500 employees)€15 a year
- Business (151–300 employees)€18 a year
- Business (51–150 employees)€21 a year
- Business (25–50 employees)€25 a year
- Enterprise (25–50 employees)€35 a year
In their own words
DarkPhish
DarkPhish is a self-hosted platform for authorized phishing simulations, security-awareness training, internal security testing and defensive research. Users can prepare or import email templates, define approved recipients, schedule campaigns, monitor activity, review recipient timelines and export results. The free Community plan costs nothing and includes up to 100 managed users, one active campaign, a simulation engine, basic reporting and the core REST API. Paid plans start at €249/mo (annual). The platform lists API, Linux, self-hosted and web availability; its installer supports fresh systemd-based Linux deployments on amd64 and arm64. Supported databases include SQLite, MySQL/MariaDB and PostgreSQL. DarkPhish describes encrypted and signed browser sessions, scoped expiring API tokens, secrets hidden from normal API responses, and signed, hash-chained administrative audit records. Professional and Enterprise plans are in development, with further capabilities planned. The project states that the software is for authorized testing and simulations only.
SentryMail
SentryMail is a self-hosted phishing-awareness platform for planning simulated campaigns and reviewing recipient-level responses. Teams can schedule campaigns, build them from HTML or Markdown templates, import .eml files, create landing pages, and track opens, clicks, and form submissions for each recipient. Reports include campaign analytics, a dashboard risk score, and CSV export. The Enterprise LMS adds self-hosted mandatory video training, automatic course assignments for low awareness scores, quizzes, and certificates. Listed integrations include LDAP, Microsoft Graph, SCIM 2.0, OIDC/SSO providers, and SMTP services. Enterprise adds SAML SSO, SIEM exports, and LMS xAPI export. Security measures listed include Argon2id passwords, encrypted secrets, two-factor authentication, audit logs, hardened containers, and hash-chained audit entries with an exportable evidence package. Community is free forever and self-hosted. Paid plans require at least 25 employees; Business and Enterprise license purchases are marked as coming soon. Installation documentation calls for Docker Compose and Linux with Docker Engine.