LUCY Security vs SentryMail
LUCY Security
lucysecurity.com
SentryMail
sentrymail.deSide by side
| Figure | LUCY Security | SentryMail |
|---|---|---|
| Price from | — | €0.83/mo |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 12 |
| Spec score · Security Awareness Training Software | 7.3 (#17) | 8.8 (#2) |
| API | The product supports APIs including REST, LDAP, SMTP, and Domain APIs for integration with existing infrastructure. | The documentation exposes API routes including an evidence-package endpoint at GET /audit-events/evidence-package. |
| Deployment | Lucy states it can run on-premises, as cloud-based SaaS on Unix or Windows, or on a dedicated server. | The official installation guide describes a Docker Compose stack and lists Linux with Docker Engine as its operating-system requirement. |
| Headquarters | Cham, Switzerland | The operator’s registered office is Lindental 8d, 94032 Passau, Germany. |
| Integrations | The plans page describes employee-directory integration with Active Directory, Azure, or other directories using LDAP, and SIEM connections through its global API. | Documented connections include LDAP, Microsoft Entra ID, SCIM 2.0, OIDC, SAML, Splunk, Elasticsearch, Microsoft Sentinel and generic JSON. |
| Privacy | Core includes full data anonymization, which the plans page describes as exporting information without personal data to maintain employee privacy. | The maker says SentryMail is GDPR-compliant, minimizes personal data, supports pseudonymized reporting, and can run fully within the customer’s infrastructure. |
| Purpose | Lucy helps organizations measure and improve employee security awareness and test IT security resilience. | SentryMail is a self-hosted open-core platform for phishing awareness that lets teams plan, send, and evaluate simulated campaigns per recipient. |
| Security controls | The plans page lists certificate-based authentication, DMZ installation, 2FA/SSO, data anonymity, and hardened VPS among its security features. | Passwords use Argon2id, runtime secrets use Fernet encryption at rest, and two-factor authentication supports backup codes. |
| Support | Elite includes VIP support, described as giving customer tickets exclusive attention from Tier 2 support engineers. | Community users are directed to GitHub support, while Business includes email support. |
| Training | Lucy offers interactive web-based security training modules that can be assigned based on simulation results or independently. | Its Enterprise LMS supports self-hosted mandatory video training, automatic course assignment for low awareness scores, quizzes, and audit-proof certificates. |
Plans
LUCY Security
- COREPriced on request
- ELITEPriced on request
- PROPriced on request
SentryMail
- CommunityFree
- Business (2,501+ employees)€10 a year
- Business (1,001–2,500 employees)€11 a year
- Business (501–1,000 employees)€13 a year
- Enterprise (2,501+ employees)€14 a year
- Business (301–500 employees)€15 a year
- Business (151–300 employees)€18 a year
- Business (51–150 employees)€21 a year
- Business (25–50 employees)€25 a year
- Enterprise (25–50 employees)€35 a year
In their own words
LUCY Security
LUCY Security has no write-up on Specifiction yet; its figures are above.
SentryMail
SentryMail is a self-hosted phishing-awareness platform for planning simulated campaigns and reviewing recipient-level responses. Teams can schedule campaigns, build them from HTML or Markdown templates, import .eml files, create landing pages, and track opens, clicks, and form submissions for each recipient. Reports include campaign analytics, a dashboard risk score, and CSV export. The Enterprise LMS adds self-hosted mandatory video training, automatic course assignments for low awareness scores, quizzes, and certificates. Listed integrations include LDAP, Microsoft Graph, SCIM 2.0, OIDC/SSO providers, and SMTP services. Enterprise adds SAML SSO, SIEM exports, and LMS xAPI export. Security measures listed include Argon2id passwords, encrypted secrets, two-factor authentication, audit logs, hardened containers, and hash-chained audit entries with an exportable evidence package. Community is free forever and self-hosted. Paid plans require at least 25 employees; Business and Enterprise license purchases are marked as coming soon. Installation documentation calls for Docker Compose and Linux with Docker Engine.