LUCY Security review
A self-hosted security awareness suite with broad simulation, reporting, and directory support.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
LUCY Security is a security awareness platform for organizations that want to test, train, and measure employee resilience. It combines phishing and other attack simulations with interactive web-based training modules, campaign content, dashboards, reporting, and risk scoring. The platform supports web, Windows, Linux, API, and self-hosted deployments, making it a fit for teams that need control over campaign operations and deployment choices.
The published plans show three contact-sales tiers. Core includes employee directory integration, customizable content, phishing attacks, a built-in email server, real-time dashboards, custom reports, and security awareness training. Pro adds in-app phishing domain registration, real-time event notifications, file-based and smishing attacks, an email report button, and SCORM compatibility. Elite includes all Pro features plus VIP support. There is no free plan, so organizations should expect a sales-led evaluation rather than a self-service entry point. The tier structure is clear about which capabilities are reserved for more advanced campaigns and support needs.
LUCY Security’s strongest fit is its combination of campaign control and ecosystem coverage. It integrates with Office 365, Google Workspace, Gmail, Active Directory, Azure Entra ID, LDAP, SMTP, REST API, Domain API, and LDAP API. SSO uses SAML 2.0 and OAuth 2.0, while directory integration supports LDAP, Active Directory, and Azure. Reporting plugins for Office 365 and Gmail, risk scoring for reported phishing emails, built-in email and domain tools, and customizable multilingual content support a broad awareness program. Choose it when self-hosting, attack variety, reporting, and identity integration matter. Teams seeking a free plan or publicly posted pricing should consider alternatives.
LUCY Security pros and cons
- Where it wins
- Phishing, file-based, smishing, and training campaigns
- Office 365 and Gmail reporting plugins with risk scoring
- Self-hosting, SSO, directory integrations, and multilingual content
- Where it doesn't
- Plans use contact-sales pricing
- There is no free plan
- VIP support is limited to the Elite plan
LUCY Security fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update