Gophish vs Wizer

Gophish is an open-source framework for testing an organization's exposure to phishing through simulations. It is intended for penetration testers and businesses conducting real-world exercises. Users can create or import phishing templates and edit them in a browser-based HTML editor. Campaigns send emails in the background and can be scheduled. Results arrive near real time: recipient timelines show email opens, link clicks, and submitted credentials, and campaign results can be exported for reports. For programmatic work, Gophish provides a REST API and a Python client. It can run from a downloaded binary or the official Docker container, across API, Linux, macOS, self-hosted, and Windows environments. The Gophish Community Edition repository includes an MIT License, permitting use, copying, modification, distribution, and sale subject to its terms. The plan is free at free. Listed attachment tracking covers docx, docm, pptx, xlsx, xlsm, txt, html, and ics files. Version 0.12.1 added configurable trusted origins to the CSRF handler for configurations where TLS terminates at an upstream load balancer.

Wizer is a cloud-based platform for security awareness training and phishing simulations for organizations. Its training covers phishing, ransomware, compliance, GDPR, insider threats, AI and deepfake attacks, and secure code. WizerAI Studio can turn documents, policies, or topics into training videos; the product also includes deepfake awareness training and an interactive real-or-AI challenge. Boost adds adaptive phishing simulations, monthly updated templates, report buttons, course planning, analytics, and automated training assignment for developers. Teams can use Azure AD or Google Workspace for directory provisioning, Okta or OneLogin for single sign-on, and Zapier for integrations. SCORM packages support importing training into external LMS platforms, including Moodle, SAP Litmos, Docebo, and Blackboard. The Free Plan includes basic annual training, basic user management, limited reporting, and automatic learner reminders. Boost can be tried free for 10 days, including a phishing simulation. Its listed price is $25 per user per year on a three-year term for 25+ users; higher user thresholds have lower listed per-user prices, down to $8 for 3,001+ users.