DarkPhish review
A capable open-source phishing platform with self-hosting and tiered program features.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
DarkPhish is a self-hosted, open-source platform for authorized phishing simulations, security-awareness programs, internal security testing, and defensive research. It suits technical security teams that want control over deployment, campaign delivery, user and group management, email templates, landing pages, results, and reporting. The web administration interface, Linux support, API access, and database options make it relevant for teams building an internally managed awareness program rather than looking for a purely hosted service.
Its strongest area is phishing-program control. Teams can create and schedule campaigns, configure sending profiles, process reporting mailboxes through IMAP, and review campaign results. The REST API includes scoped personal access tokens, while tamper-evident administrative audit trails and protected integration and credential secrets support accountable administration. SQLite, MySQL/MariaDB, and PostgreSQL support provide deployment flexibility. Entra and Google integrations are available on Professional, while SIEM integrations are included with Enterprise.
The Community plan costs €0 forever and includes the simulation engine, basic reporting, and the core REST API. Professional costs €249 per month with annual billing or €299 per month with monthly billing, adding Human Risk + Training, Smart Groups, Entra / Google, and advanced reporting + AI. Enterprise costs €999 per month and adds SSO + Advanced RBAC, SIEM integrations, multi-organization support with an SLA, and on-premises or air-gapped deployment. DarkPhish is a strong fit for technical teams comfortable managing self-hosted software. Organizations seeking a simpler hosted rollout or advanced controls without Enterprise pricing should consider alternatives.
DarkPhish pros and cons
- Where it wins
- Open-source, self-hosted phishing simulations with campaign scheduling.
- REST API, scoped tokens, and tamper-evident audit trails.
- Supports SQLite, MySQL/MariaDB, and PostgreSQL.
- Where it doesn't
- Paid tiers start at €249 per month with annual billing.
- Self-hosting places deployment and operations with your team.
- SSO, SIEM, and air-gapped deployment require Enterprise.
DarkPhish fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update