uPhish
uPhish is a web-based phishing simulation and training platform from usecure for MSPs and IT teams.
What uPhish is
uPhish is a web-based phishing simulation and training platform from usecure for MSPs and IT teams. It automates recurring email simulations through AutoPhish, varying send times to create ongoing exercises. More than 400 templates are listed, including brand impersonation scenarios based on current attack trends. Teams can create targeted messages for spear-phishing and internal spoofing exercises with domain spoofing. The service records opens, clicks, and compromises, then compares results in real time across users, teams, or an organisation. Message injection can place simulations directly in inboxes, helping delivery without allow-listing. Campaign tools include a landing-page builder, risk scoring, and follow-up training for users who click. Microsoft 365 and Google Workspace user-sync integrations are listed for MSPs, with Microsoft 365 message injection documented. uPhish runs on the web, has no free plan, and offers a 14-day trial with pricing on request.
Good
- Automated recurring simulations at varied times
- More than 400 phishing templates
- Tracks opens, clicks, and compromises
- Supports targeted spoofing campaigns
- Includes follow-up training and risk scoring
Watch out
- No free plan
- Pricing is available on request
- Simulation channel listed is email
- Web platform only
Who it suits
uPhish suits MSPs and IT teams running phishing awareness programs across users or multiple clients. It is designed for organisations needing automated email simulations, tracking, and follow-up training.
Verdict
uPhish combines automated email exercises, detailed engagement tracking, and training for people who click. Its MSP-oriented integrations and multi-organisation comparisons may suit providers managing several customer environments.
Plans and prices
From uPhish's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| usecure subscription (includes uPhish) | Priced on request | Per-user pricing · uPhish included with core features · MSP monthly usage billing available |
The facts
Each one read from uPhish's own pages, with the date it was checked.
What it does
- Audience
- The maker describes usecure as serving MSPs and IT teams, and says uPhish scales from hundreds of users to hundreds of clients.checked 7 Oct 2026
- Campaigns
- Users can build targeted templates and simulate spear-phishing or internal spoofing attacks using domain spoofing.checked 7 Oct 2026
- Compliance
- The privacy policy states that usecure has ISO 27001 certification and SOC 2 Type II attestation covering its information security management practices.checked 7 Oct 2026
- Integrations
- The pricing page lists Microsoft 365 and Google Workspace user-sync integrations for MSPs; the Help Centre documents Microsoft 365 message injection for uPhish.checked 7 Oct 2026
- Message delivery
- Message injection can deliver simulations directly into inboxes to improve deliverability and avoid allow-listing.checked 7 Oct 2026
- Purpose
- uPhish automates phishing simulations and provides follow-up training for users who click.checked 7 Oct 2026
- Security
- The privacy policy says usecure uses AES-256 and TLS 1.2 or higher encryption, role-based access controls, multi-factor authentication, regular vulnerability scanning, and annual independent penetration testing.checked 7 Oct 2026
- Simulation scheduling
- AutoPhish schedules recurring phishing simulations automatically at varied times.checked 7 Oct 2026
- Support
- The pricing page lists in-app live chat and a knowledge base/help centre; its FAQ says plans include support team access, onboarding resources, and product documentation.checked 7 Oct 2026
- Templates
- The product page lists more than 400 phishing templates, including brand impersonations based on current attack trends.checked 7 Oct 2026
- Tracking
- uPhish tracks opens, clicks, and compromises and provides real-time comparisons across users, teams, or the organisation.checked 7 Oct 2026
The company
- Company
- usecure lists 2016 as its founding year and gives its UK office as Holyoake House, Hanover Street, Manchester.checked 7 Oct 2026
- Headquarters
- Manchester, United Kingdomchecked 28 Sep 2026
Money
- Trial
- The pricing FAQ says customers can request a trial to explore the platform before committing.checked 7 Oct 2026
Alternatives to uPhish
- 1
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 2
CanIPhish
Free planWebAPIExtension6.8Free plan - 3
SANS Phishing Platform
WebAPI6.5From $3,000 a year - 4
6.3 - 5
CyberHoot
Web6.3From $125 a month - 6
Hoxhunt
AndroidiOSWebmacOS6.3