Hackiwi review
A free, self-hosted training and phishing platform for smaller teams and technical operators.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Hackiwi is an open-source security awareness platform for individuals, families, employees and organisations. Its library covers phishing, social engineering, authentication, cloud security, compliance and incident reporting. The product combines training with phishing simulations, one-click reporting from mail clients, automated report classification and triage, learning-path assignment, completion tracking, OSINT, exposure scanning and monitoring for websites, dependencies, domains and lookalike domains. It is available on the web and as self-hosted software.
Pricing is straightforward across its published plans. Individuals and families receive every training module forever, website scanning, domain monitoring and OSINT for free, with no account needed to browse the library. Organisations up to 20 users receive the full library and every premium tool at no cost, including assigned learning paths, completion tracking and phishing simulation after domain verification. Organisations over 20 users keep access to the free training library but pay for premium administrative tooling, or can choose the self-hosting option. This makes Hackiwi particularly suitable for small organisations that want more than a static course catalogue without adding a software subscription.
Its strongest fit is for teams that value open-source control, exposure monitoring and practical phishing workflows. Self-hosting under AGPL-3.0 gives technical organisations an alternative to a hosted deployment, while integrations with Anthropic, Have I Been Pwned and VirusTotal support parts of the reporting and exposure workflow. The platform also includes SSO support, automated training and phishing-reporting tools. However, it does not provide verified risk scoring, and its business integration set is narrower than platforms built around broad enterprise ecosystems. Choose Hackiwi for free or self-hosted awareness training, phishing basics and exposure visibility; consider an alternative if verified risk scoring or extensive business integrations is central to your program.
Hackiwi pros and cons
- Where it wins
- Free training library for individuals and organisations
- Phishing simulations with tracked opens, clicks and reports
- Self-hosting under the AGPL-3.0 license
- Where it doesn't
- Premium administrative tooling is paid for organisations over 20
- No verified risk scoring
- Business integrations are limited to Anthropic, Have I Been Pwned and VirusTotal
Hackiwi fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update