Infosec IQ vs SANS Phishing Platform
Infosec IQ
infosecinstitute.com
SANS Phishing Platform
sans.orgSide by side
| Figure | Infosec IQ | SANS Phishing Platform |
|---|---|---|
| Price from | — | $250/mo |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Plans published | 3 | 3 |
| Spec score · Phishing Simulation Software | 7.5 (#11) | 7.9 (#7) |
| Company | Infosec Institute says it became part of Cengage Learning in 2022; the about page gives its address as Independence, Kentucky. | SANS says it launched in 1989 as a cooperative for information security thought leadership. |
| Founded | 2004 | 1989 |
| Headquarters | Independence, Kentucky, United States | North Bethesda, Maryland, United States |
| Integrations | The vendor lists Active Directory, Azure AD, SCIM, SSO, an open API, and endpoint protection integrations including Symantec, CrowdStrike, Sophos, Trend Micro, Carbon Black, McAfee and Cisco AMP for Endpoints. | The platform offers prebuilt SSO, SMTP and Active Directory integrations. |
| Purpose | Infosec IQ provides employee security awareness training and phishing simulations for organizations. | The platform tests employees’ ability to withstand phishing and social engineering attacks. |
| Reporting | Dashboards provide training completion, phishing, learner risk and culture survey data, with options to customize and export reports. | It includes prebuilt stakeholder reports designed to discuss program metrics without compromising privacy, plus custom reports. |
Plans
Infosec IQ
- EnterprisePriced on request
- Infosec IQ + SkillsPriced on request
- StandardPriced on request
SANS Phishing Platform
- Phishing Training (CIS Aggregate Buy, 2017)$3,000 a year
- SANS Phishing PlatformPriced on request
- SANS Security Awareness / PhishingPrice not published
In their own words
Infosec IQ
Infosec IQ provides employee security awareness training and phishing simulations for organizations. Its library contains more than 3,000 role-based resources, and the phishing simulator has more than 2,000 templates; the vendor says it adds templates weekly. Training can be tailored to employee roles and security aptitude, with recommendations informed by assigned courses and engagement patterns. Dashboards cover completion, phishing activity, learner risk and culture survey results, with customizable, exportable reports. PhishNotify connects with Outlook and Gmail so employees can report suspicious email with one click. Listed integrations include Active Directory, Azure AD, SCIM, SSO, an open API and several endpoint protection products. The platform supports 34 course languages, automated training and risk scoring. The vendor says its training, simulations and learner tools comply with WCAG 2.2 AA and Section 508, and that completion tracking can document training for frameworks including HIPAA, PCI-DSS, SOC 2 and CMMC. Pricing is on request; a free phishing risk test is offered for up to 100 employees.
SANS Phishing Platform
SANS Phishing Platform has no write-up on Specifiction yet; its figures are above.