PhishSkill vs ScamDrill
PhishSkill
phishskill.comScamDrill
scamdrill.comSide by side
| Figure | PhishSkill | ScamDrill |
|---|---|---|
| Price from | Free | $2.50/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | — | Yes |
| Plans published | 3 | 10 |
| Spec score · Cybersecurity Training Platforms | 8.1 (#6) | 8.6 (#3) |
| Purpose | PhishSkill is a security-awareness and phishing-simulation platform that helps organizations reduce human cyber risk. | ScamDrill trains families and organizations to recognize scams through realistic, safe simulations and follow-up lessons. |
| Security controls | The service lists tenant isolation, role-based access control, bcrypt password hashing, audit trails, anomaly alerts, and regular internal security reviews. | The trust center states TLS and at-rest encryption, database row-level tenant isolation, passkey two-factor authentication, signed HMAC-SHA256 webhooks and strict security headers. |
| Support | The contact page says general support targets replies within 24 hours and provides a separate sales contact for enterprise plans. | The Family plan includes priority support; organization Starter and Team list helpdesk support, and Enterprise lists priority support. |
| What it does | PhishSkill provides authorized phishing simulations, security-awareness training and behavioral risk analytics for organizations. | ScamDrill provides safe simulated phishing training, scam checking and progress analytics for families and organizations. |
Plans
ScamDrill
- FreeFree
- FreeFree
- AI Analysis add-on$2.99 a month
- Family$9 a month
- AI Analysis add-on$29.99 a year
- Family$84 a year
- Starter$449 a year
- Team$1,499 a year
- Business$5,999 a year
- Enterprise$19,999 a year
In their own words
PhishSkill
PhishSkill is a security-awareness and phishing-simulation platform for organizations seeking to reduce human cyber risk. It runs authorized simulations over email and WhatsApp, measures employee responses, and assigns short training based on risk profiles and simulation failures. Individual and departmental scores draw on simulation behavior, training engagement, and historical vulnerability. Dashboards track phishing clicks, successful reports, and training progress. Teams can be entered manually or imported by CSV, with role-based permissions. AI-generated templates work with OpenAI, Anthropic, or Google Gemini; customers can use PhishSkill’s AI on Premium or bring their own key on any plan. The managed cloud service requires no local installation. PhishSkill says it encrypts data at rest with AES-256 and in transit with TLS 1.2+, and hosts the service in India’s cloud region. Starter is free for 30 days, then billed per user monthly at an amount not listed. Premium is custom-priced, with volume discounts described. There is no free plan, and SSO support is listed as unavailable.
ScamDrill
ScamDrill trains families and organizations to recognize scams through simulated messages and follow-up lessons. Family exercises cover email and SMS, while organization simulations also include QR code scams. The exercises adapt to each learner’s performance, increasing difficulty as skills improve. A dashboard tracks progress, scam types caught and areas that may need more practice. Family members can forward suspicious emails or texts for AI analysis; this message-checking feature is included with the Family plan. Organizations can sync rosters with Okta, Azure AD and Google Workspace, and Enterprise includes a REST API and webhooks. ScamDrill says its data is encrypted in transit and at rest, with database-level tenant isolation and passkey-based two-factor authentication. It also says simulated landing pages do not capture, transmit or store what a learner types. The company says it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is listed as planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001 and HIPAA.