nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Phishing Simulation Training Sources

tedjames

Can you recommend some good companies for phishing simulation training? I'm looking for programs similar to what SANS offers: https://www.sans.org/security-awareness-training/products/phishing

If you have current pricing, that would be great.

I've been looking at SANS, Proofpoint, and KnowBe4 so far.

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

chrisone

We use PhishMe to simulate phishing attempts and to educate our users.
PhishMe has been bought out re-branded and upgraded by Cofense.

https://cofense.com/

UnixGuy

I used Wombat Security recently, they have good products. They have cool video training material, and a phishing simulation solution as well https://www.wombatsecurity.com/

(they're owned by ProofPoint).

Meggo

@tedjames have you checked out the latest Gartner Magic Quadrant for Security Training & Awareness? We're (InfoSec Institute) in it this year as a Challenger, so of course we purchased distribution rights for the reprint. It also includes good info on the brands you listed above. If you're interested in taking a look, you can access it here:

https://www.infosecinstitute.com/gartner-magic-quadrant-2018/

Completing the form on that page will put you in our database. If you'd rather chat about it, let me know. I use it (our solution) frequently to try to phish my marketing coworkers with Salesforce password reset notifications.

tedjames

Thanks for all of the great info! I've made note of it all.

@Meggo shortly after I created this post, I found this: https://www.infosecinstitute.com/securityiq/phishing

Looks really good. I'll follow up with an IM.

FSF150

KnowBe4 user here. Have been pretty happy with the interface. They offer both the phishing and the secawareness training modules so good tracking for audits.

Not really qualified to speak on the others, but happy with KnowBe4 so far.

tedjames

FSF150 said:

KnowBe4 user here. Have been pretty happy with the interface. They offer both the phishing and the secawareness training modules so good tracking for audits.

Not really qualified to speak on the others, but happy with KnowBe4 so far.

Thanks for the recommendation. KnowBe4 is on my list. Actually, they've been hounding me almost daily for a long time now. Attend a vendor-sponsored webinar and they won't leave you alone. But it is good to know that their services are worthwhile.

McxRisley

My company uses KnowBe4. They arent bad if you can stand Kevin Mitnick. Every single video starts with "Hi, I'm Kevin Mitnick. The world's most famous hacker!"