DarkPhish vs SoSafe
DarkPhish
darkphish.skSoSafe
sosafe.deSide by side
| Figure | DarkPhish | SoSafe |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 3 | 4 |
| Spec score · Security Awareness Training Software | 8.8 (#1) | 6.8 (#23) |
| Purpose | DarkPhish is a free platform for authorized phishing simulations, security-awareness training, internal security testing, and defensive research. | SoSafe offers cybersecurity awareness training that uses behavioural science and role-based learning to help employees build secure habits. |
| Support | Bug reports, questions and feature requests are directed to GitHub Issues, while vulnerabilities use a private reporting channel. | Essential includes email helpdesk access and self-service resources, while SoSafe says Customer Success Managers are available for strategy advice and ongoing product support. |
Plans
SoSafe
- EssentialPriced on request
- PremiumPriced on request
- ProfessionalPriced on request
- UltimatePriced on request
In their own words
DarkPhish
DarkPhish is a self-hosted platform for authorized phishing simulations, security-awareness training, internal security testing and defensive research. Users can prepare or import email templates, define approved recipients, schedule campaigns, monitor activity, review recipient timelines and export results. The free Community plan costs nothing and includes up to 100 managed users, one active campaign, a simulation engine, basic reporting and the core REST API. Paid plans start at €249/mo (annual). The platform lists API, Linux, self-hosted and web availability; its installer supports fresh systemd-based Linux deployments on amd64 and arm64. Supported databases include SQLite, MySQL/MariaDB and PostgreSQL. DarkPhish describes encrypted and signed browser sessions, scoped expiring API tokens, secrets hidden from normal API responses, and signed, hash-chained administrative audit records. Professional and Enterprise plans are in development, with further capabilities planned. The project states that the software is for authorized testing and simulations only.