Open source · Security-first · Actively maintained

Phishing simulations.
Built for defenders.

DarkPhish is an open-source platform for authorized phishing simulations, security-awareness training, internal security testing, and defensive research.

Download DarkPhish Read the docs

For authorized security testing only.

DarkPhish — phishing simulation and human risk management platform
scoped access
signed audit trail
Explore

DarkPhish workflow

Launch a Campaign in 3 steps

01

Set Templates & Targets

Create or import high-fidelity phishing templates, define approved recipients, and customize campaign content directly in the browser.

02

Launch the Campaign

Start immediately or schedule delivery for later. DarkPhish handles campaign delivery in the background while you stay in control.

03

Track Results

Monitor campaign activity in near real time, review recipient timelines, and export results for reporting and follow-up.

Security is part of the product

A modern foundation for authorized simulations.

DarkPhish keeps the straightforward deployment model that made Gophish useful, while hardening the platform for current security and operational expectations.

Secure browser sessions

Encrypted and signed sessions with hardened cookie settings.

Scoped API access

Expiring personal access tokens instead of permanent legacy API keys.

Protected secrets

Sensitive SMTP, IMAP, and webhook secrets stay write-only in normal API responses.

darkphish / security baseline LIVE
Deployment posture Hardened production controls enabled
API tokensScopedexpiring credentials
Audit eventsSignedhash-chained records

DarkPhish plans

Simple pricing. Built to scale.

Start with DarkPhish Community for free and upgrade when your human risk program grows. No hidden setup fees. Self-hosted deployment. Your data stays under your control.

Community

Free€0 / forever

For individuals, labs and small security teams.

  • Managed usersUp to 100
  • Active campaigns1
  • Simulation engine✓
  • Basic reporting✓
  • Core REST API✓
Get DarkPhish Free

For authorized internal security testing, awareness and defensive use.

Most Popular

Professional

€249/ month · billed annually

€299 month-to-month

For organizations running a continuous human risk management program.

  • Managed users250 included
  • CampaignsUnlimited
  • Human Risk + Training✓
  • Smart Groups✓
  • Entra / Google✓
  • Advanced reporting + AI✓

€0.70 / additional managed user / month

Start Professional

Best for SMEs and security teams building measurable human risk reduction.

Enterprise

€999/ month

For large, regulated and security-sensitive organizations.

  • Managed usersUnlimited
  • CampaignsUnlimited
  • SSO + Advanced RBAC✓
  • SIEM integrations✓
  • Multi-org + SLA✓
  • On-prem / air-gapped✓
Contact Sales

Pricing depends on users, deployment model, integrations and enterprise requirements.

Need help choosing the right plan?

Community gets you started. Professional adds the Human Risk Management core. Enterprise adds governance, integrations and deployment controls.

Talk to our team