Phishing Club
Phishing Club is an open source phishing simulation and red team phishing framework for authorized security testing. Self host it on your own server via a one line installer or Docker.
Plan, launch, and measure realistic campaigns from a single Go binary with an embedded web UI, HTTP/HTTPS phishing servers, and a REST API.
Features: multi stage phishing flows, flexible scheduling, multiple domains with automatic TLS, SMTP or custom API delivery with OAuth, recipient groups with CSV import and SCIM, PDF campaign reports, analytics, multi tenancy, MFA and
SSO (Entra ID, OIDC), webhooks, and in app updates.
Red team and AiTM: reverse proxy phishing to capture sessions, remote browser phishing, DOM and URL rewriting, dynamic obfuscation, JA4 and geo IP filtering, and device code phishing.
Learn more
Libraesva PhishBrain
Libraesva Phishing Simulator is a security awareness and testing solution designed to help organizations assess and improve employee resilience against phishing attacks through realistic, controlled simulations. It enables administrators to create and launch customizable phishing campaigns that mimic real-world threats, allowing security teams to identify vulnerable users and measure organizational risk exposure. With an intuitive management interface, the solution provides detailed reporting on user behavior, including who opened messages, clicked malicious links, or submitted credentials, enabling targeted follow-up training. It supports a wide range of ready-to-use phishing templates and allows companies to tailor scenarios to their specific threat landscape, industries, or internal policies. By combining automated campaign scheduling, performance analytics, and user risk scoring, the tool helps organizations build continuous security awareness programs.
Learn more
PhishTitan
Powerful Inline Phishing Protection for M365. Harness the power of AI and our LLM to defeat phishing. PhishTitan is next generation inline phishing protection and remediation, powered by TitanHQ, the global leaders in email cybersecurity.
Our proprietary large learning model and AI integrates directly with Microsoft 365, both catching and remediating sophisticated phishing and BEC attacks that Microsoft misses. It provides users with in-the-moment warning banners to help them decide whether an email is malicious or safe, continually enhancing the human firewall.
Risk free deployment in 6 minutes. PhishTitan will filter your email to identify phishing threats and protect your users and business. That’s how you AVOID that one wrong click that can lead to disaster – all it takes is 6 minutes! The TitanHQ team has been a category leader in the email security field for over 20 years. Bringing the experience of working with over 12,000 customers to our new phishing solution.
Learn more
Terranova Security
Terranova Security makes it easy to build cybersecurity awareness programs that feature the industry’s highest-quality training content and real-world phishing simulations. As a result, any employee can better understand phishing, social engineering, data privacy, compliance, and other critical best practices.
Learn more