This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

DarkPhish

Freemium#28 of 30 in Security Awareness Training Software

DarkPhish: A capable open-source phishing platform with self-hosting and tiered program features. Ranked #28 of 30 in Security Awareness Training Software by our editors (6.6/10); pricing: Free plan; best for technical teams wanting open-source phishing tooling.

6.6/10Editor score

Visit DarkPhish

DarkPhish6.6 Visit DarkPhish

At a glance

Editor score
6.6 / 10
Pricing
Free plan
Best for
Technical teams wanting open-source phishing tooling
Free plan
Yes
Paid from
€249/mo
Phishing simulations
Yes
Facts checked
20 Sep 2026

Where it wins
- Open-source, self-hosted phishing simulations with campaign scheduling.
- REST API, scoped tokens, and tamper-evident audit trails.
- Supports SQLite, MySQL/MariaDB, and PostgreSQL.
Where it doesn't
- Paid tiers start at €249 per month with annual billing.
- Self-hosting places deployment and operations with your team.
- SSO, SIEM, and air-gapped deployment require Enterprise.

Our verdict on DarkPhish

DarkPhish is a self-hosted, open-source platform for authorized phishing simulations, security-awareness programs, internal security testing, and defensive research. It suits technical security teams that want control over deployment, campaign delivery, user and group management, email templates, landing pages, results, and reporting. The web administration interface, Linux support, API access, and database options make it relevant for teams building an internally managed awareness program rather than looking for a purely hosted service.

Its strongest area is phishing-program control. Teams can create and schedule campaigns, configure sending profiles, process reporting mailboxes through IMAP, and review campaign results. The REST API includes scoped personal access tokens, while tamper-evident administrative audit trails and protected integration and credential secrets support accountable administration. SQLite, MySQL/MariaDB, and PostgreSQL support provide deployment flexibility. Entra and Google integrations are available on Professional, while SIEM integrations are included with Enterprise.

The Community plan costs €0 forever and includes the simulation engine, basic reporting, and the core REST API. Professional costs €249 per month with annual billing or €299 per month with monthly billing, adding Human Risk + Training, Smart Groups, Entra / Google, and advanced reporting + AI. Enterprise costs €999 per month and adds SSO + Advanced RBAC, SIEM integrations, multi-organization support with an SLA, and on-premises or air-gapped deployment. DarkPhish is a strong fit for technical teams comfortable managing self-hosted software. Organizations seeking a simpler hosted rollout or advanced controls without Enterprise pricing should consider alternatives.

Your product? Our editors can test DarkPhish in depth and publish a review, labelled as paid · from $149/mo →

DarkPhish pricing

Plans Free planFreemium A usable free plan; paid tiers unlock the limits above. Prices checked 20 Sep 2026.

See plans on darkphish.sk

All 3 DarkPhish plans and prices →

DarkPhish fact sheet

Free plan	Yes
Paid from	€249/mo
Phishing simulations	Yes
Phish reporting button	Not verified
Automated training	Not verified
Risk scoring	Not verified
SSO support	Yes
Course languages	Not verified
Deployment	Self-hosted
Platforms	Web, Linux
Compliance & security	SSO/SAML
Support	Docs, Community
Built for	Solo, Small business, Mid-market, Enterprise (editorial estimate)
Integrations	3 integrations: Entra, Google, SIEM
Pricing	Free plan (source)
Website	darkphish.sk
Facts checked	20 Sep 2026

DarkPhish integrations

DarkPhish lists 3 integrations on its own site.

Entra
Google
SIEM

Alternatives to DarkPhish

See all DarkPhish alternatives →

Used DarkPhish? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used DarkPhish for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used DarkPhish myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

DarkPhish is listed in our Security Awareness Training Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/darkphish/"><img src="https://www.itechguides.com/best/badge/darkphish.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update