LUCY Security
LUCY Security helps organizations measure employee security awareness and assess IT security resilience.
What LUCY Security is
LUCY Security helps organizations measure employee security awareness and assess IT security resilience. It simulates phishing, smishing, file-based, portable-media, and data-entry attacks. Organizations can use results to assign interactive web training, or offer modules independently. Security consultants can tailor programs using risk analysis, localized content, role-based training, and regulatory standards. The platform supports employee-directory connections through LDAP, SIEM connections through its global API, and APIs including REST, LDAP, SMTP, and Domain APIs. Deployment options include on-premises, cloud SaaS on Unix or Windows, and dedicated servers. Listed security controls include certificate-based authentication, DMZ installation, 2FA/SSO, data anonymity, and hardened VPS. Core includes data anonymization, and training can be exported to another LMS using SCORM. The homepage lists more than 130 languages and over 1,000 customizable training modules. Plans are paid, with pricing on request and no free plan. It supports API, Linux, self-hosted, web, and Windows.
Good
- Simulates phishing and several other attack types.
- Training can follow simulation results or run independently.
- Offers on-premises, SaaS, and dedicated-server deployment.
- SCORM export supports moving training to another LMS.
- Supports more than 130 languages.
Watch out
- No free plan is listed.
- Pricing is available on request.
- Some listed security and support features depend on plans.
Who it suits
LUCY suits organizations that want to assess workforce security awareness and connect simulations with training. Its deployment options and program customization may fit teams with specific infrastructure or role-based training needs.
Verdict
LUCY combines attack simulations, configurable training, and several deployment options for organizational security awareness programs. Pricing requires a request, and plan details distinguish features such as SCORM compatibility and VIP support.
Plans and prices
From LUCY Security's own pricing page, checked 2 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| CORE | Priced on request | Critical security awareness training · phishing simulations · on-prem deployment option |
| ELITE | Priced on request | All Pro features · VIP support |
| PRO | Priced on request | All Core features · advanced attack campaigns · email report button · SCORM compatibility · end-user and multi-tenant portals |
The facts
Each one read from LUCY Security's own pages, with the date it was checked.
What it does
- API
- The product supports APIs including REST, LDAP, SMTP, and Domain APIs for integration with existing infrastructure.checked 2 Oct 2026
- Attack simulations
- The platform simulates phishing and other threats, including smishing, file-based, portable-media, and data-entry attacks.checked 2 Oct 2026
- Deployment
- Lucy states it can run on-premises, as cloud-based SaaS on Unix or Windows, or on a dedicated server.checked 2 Oct 2026
- Integrations
- The plans page describes employee-directory integration with Active Directory, Azure, or other directories using LDAP, and SIEM connections through its global API.checked 2 Oct 2026
- Languages
- The homepage states that Lucy supports more than 130 languages and includes over 1,000 customizable training modules.checked 2 Oct 2026
- Privacy
- Core includes full data anonymization, which the plans page describes as exporting information without personal data to maintain employee privacy.checked 2 Oct 2026
- Program customization
- Security consultants can build customized awareness programs using organizational risk analysis, localized content, role-based training, and regulatory standards.checked 2 Oct 2026
- Purpose
- Lucy helps organizations measure and improve employee security awareness and test IT security resilience.checked 2 Oct 2026
- Security controls
- The plans page lists certificate-based authentication, DMZ installation, 2FA/SSO, data anonymity, and hardened VPS among its security features.checked 2 Oct 2026
- Support
- Elite includes VIP support, described as giving customer tickets exclusive attention from Tier 2 support engineers.checked 2 Oct 2026
- Training
- Lucy offers interactive web-based security training modules that can be assigned based on simulation results or independently.checked 2 Oct 2026
- Training portability
- Lucy states that its training content can be exported to another LMS using SCORM.checked 2 Oct 2026
The company
- Headquarters
- Cham, Switzerlandchecked 28 Sep 2026
Alternatives to LUCY Security
- 1
Wizer
Free planAndroidiOSWebAPI8.0Free plan - 2

SentryMail
Free planOpen sourceWebAPIExtensionLinux7.8From €11 a year - 3

DarkPhish
Free planOpen sourceWebAPILinuxSelf-hosted7.2Free plan - 4

Keepnet Labs
WebAPISelf-hosted6.4From $1.80 a month - 5
6.3 - 6

CyberHoot
Web6.3From $125 a month
