Boxphish
Boxphish combines phishing simulations, training content, and analytics to help organisations reduce cyber attack risk.
What Boxphish is
Boxphish combines phishing simulations, training content, and analytics to help organisations reduce cyber attack risk. Its library has more than 150 B2B and B2C simulation templates, and a builder supports custom scenarios. Training uses short videos followed by quizzes or games, covering subjects such as phishing, malware, social engineering, GDPR, and data privacy. Dashboards report simulation results, course completion, and risk scores, with drill-down by user, department, or location. Boxphish runs on Android, iOS, and the web. Listed integrations include Google and Microsoft Office 365 user syncing and single sign-on for Google and Microsoft Office. A Microsoft Teams integration is offered as a bolt-on for Essentials and Enhanced, supporting course notifications, access, and completion in Teams with progress syncing back to Boxphish. Enhanced includes dark web monitoring for up to five domains. Lite costs £5/user/yr and includes one admin, 12 phishing simulations, and 12 training topics. Essentials and Enhanced pricing is available by contacting the company. AWS hosting and device optimisation are listed across all three plans.
Good
- More than 150 simulation templates are available.
- Custom simulation builder supports tailored scenarios.
- Training combines video with quizzes or games.
- Dashboards break results down by user, department, or location.
- Lite costs £5/user/yr.
Watch out
- No free plan is listed.
- Essentials and Enhanced pricing requires contacting the company.
- Lite includes one admin.
- Content is listed in one language.
Who it suits
Boxphish suits organisations seeking phishing practice, security training, and risk reporting for staff. It may also suit teams that want user syncing or, on eligible plans, a Microsoft Teams course experience.
Verdict
Boxphish combines simulations, training, and analytics, with plan options that vary in admin limits and integrations. Lite has a listed per-user annual price; request pricing for Essentials or Enhanced.
Plans and prices
From Boxphish's own pricing page, checked 29 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Lite | £5 a year | 1 admin · 12 phishing simulations · 12 training topics · AWS hosting · Per user, per year |
| Enhanced | Priced on request | Unlimited admins · dark web monitoring up to five domains · API datafeed · Get in touch to discuss pricing |
| Essentials | Priced on request | Two admins · bespoke content available at POA · ongoing customer success management · Get in touch to discuss pricing |
The facts
Each one read from Boxphish's own pages, with the date it was checked.
What it does
- Accessibility
- The pricing page lists WCAG compliance and device optimisation for all three plans.checked 29 Sep 2026
- Analytics
- Dashboards report simulation results, course completion and risk scores, with drill-down by users, departments or locations.checked 29 Sep 2026
- Dark web monitoring
- Enhanced includes ongoing monitoring for up to five domains, real-time credential monitoring, breach alerts, risk prioritisation and a secure password handling portal.checked 29 Sep 2026
- Data hosting
- The pricing page lists AWS under general administration and data storage for all three plans.checked 29 Sep 2026
- Integrations
- The pricing page lists Google and Microsoft Office 365 user syncing, single sign-on for Google and Microsoft Office, and a Microsoft Teams integration available as a bolt-on for Essentials and Enhanced.checked 29 Sep 2026
- Purpose
- Boxphish combines phishing simulations, training content and analytics to help organisations reduce cyber attack risk.checked 29 Sep 2026
- Security certification
- Boxphish announced that it achieved Cyber Essentials Plus certification in April 2026.checked 29 Sep 2026
- Simulation library
- The platform offers over 150 B2B and B2C phishing simulation templates and a simulation builder for custom scenarios.checked 29 Sep 2026
- Support
- The maker says customer support includes technical assistance, onboarding guidance and ongoing help via email, phone and an online knowledge base.checked 29 Sep 2026
- Training
- Training uses short video modules followed by quizzes or games, with lessons covering topics including phishing, malware, social engineering, GDPR and data privacy.checked 29 Sep 2026
The company
- Company
- Boxphish says it has helped organisations since 2018 and lists its address as Riverside House, 7 Canal Wharf, Leeds, LS11 5AS.checked 29 Sep 2026
- Founded
- 2018checked 28 Sep 2026
- Headquarters
- Leeds, England, United Kingdomchecked 28 Sep 2026
- Teams experience
- The Microsoft Teams integration supports course notifications, access and completion in Teams, with progress syncing back to Boxphish and desktop and mobile support.checked 29 Sep 2026
Money
- Plan limits
- Lite includes one admin and excludes randomised simulation sending and the phish report integration; Essentials includes two admins, while Enhanced includes unlimited admins.checked 29 Sep 2026
Alternatives to Boxphish
- 1
Wizer
Free planAndroidiOSWebAPI8.0Free plan - 2
ScamDrill
Free planAndroidiOSWebAPI7.9From $84 a year - 3
PhishingBox
AndroidiOSWebAPI7.5 - 4
Brightside AI
Free planWebAPIExtension7.3From €0.50 a month - 5
PhishSkill
WebExtension6.7 - 6
Keepnet Labs
WebAPISelf-hosted6.4From $1.80 a month