What is Gophish?
A free, cross-platform tool that helps organizations measure their vulnerability to phishing by automating security awareness testing campaigns. It provides real-time tracking, a web-based interface, and an API for managing phishing simulations.
Gophish pricing
We don't have Gophish's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.
Free and open source
Platform & deployment
Independently observed- CLI
- macOS
- Web
- Linux
- Windows
- Self-hosted
Security & compliance
Known vulnerabilities: 8 (2 in the last 12 months), max severity HIGH sourcea count reflects scale & disclosure, not quality
Gophish alternatives
Other phishing simulation we track, ranked by the same independent score.
- PhishedAutomated security awareness training designed to achieve zero security incidentslow · 6%
- KnowBe4Security awareness and training platform that uses simulated phishing and real-time coaching to build security-conscious employeeslow · 15%
- SoSafeA platform that builds employee security awareness through gamified training, realistic attack simulations, and behavioral risk monitoring.low · 42%
- NinjioAI-powered cybersecurity awareness training platform that combines personalized phishing simulations with engaging microlearning contentlow · 3%
- HoxhuntAI-powered security awareness platform that automates phishing training and gamified employee cyber behavior changelow · 15%
Compare Gophish
Side by side against other phishing simulation, attribute by attribute, with a source on every value.
The Vioscale score: one lens on the evidence
Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Gophish, not the verdict.
| Signal | Score | Weight | Contribution | Evidence |
|---|---|---|---|---|
| Stars | 78 | 0.03 | 2.0 | ✓ |
| Release cadence | 39 | 0.05 | 2.0 | ✓ |
| Security score | 38 | 0.04 | 1.6 | ✓ |
| Dependent projects | 21 | 0.06 | 1.3 | ✓ |
| Capabilities | 0 | 0.08 | 0.0 | - |
| Integrations | 0 | 0.07 | 0.0 | - |
| Development activity | 0 | 0.09 | 0.0 | ✓ |
| Security posture | 0 | 0.07 | 0.0 | - |
| Package downloads | 0 | 0.14 | 0.0 | - |
| Developer Q&A activity | 0 | 0.06 | 0.0 | - |
Computed . Re-weight it by intent, or see the full method.
All data & sourcesshow ↓
Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.