DarkPhish
7.2#3 in security awareness training softwareFree planFree planWebAPILinuxSelf-hosted
VisitDarkPhish vs SentryMail
SentryMail
7.8#2 in security awareness training softwareFrom €11 a yearFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | DarkPhish | SentryMail |
|---|---|---|
| Installation | The installer detects Linux distribution and CPU architecture, installs dependencies and creates a hardened systemd service. | Installation is provided through an interactive install.sh script or manual Docker Compose commands. |
| Licence | DarkPhish is distributed under the MIT License and derives from Gophish with original notices preserved. | The core is open source under the Mozilla Public License 2.0, while Business and Enterprise add-ons are proprietary. |
| Limit: paid availability | Professional and Enterprise editions are described as still in development rather than generally available. | The pricing page says Business and Enterprise purchasing is coming soon. |
| Maker | The website credits DarkArmy and fsociety as DarkPhish developers. | The legal notice identifies SecureBits Cyber Security UG (in formation), represented by Aurel Louis Hintzen, with a registered office in Passau, Germany. |
| Purpose | DarkPhish is a free platform for authorized phishing simulations, security-awareness training, internal security testing, and defensive research. | SentryMail is a self-hosted open-core platform for phishing awareness that lets teams plan, send, and evaluate simulated campaigns per recipient. |
| Repository activity | The public GitHub repository reports 1,018 commits, zero stars and zero forks on the opened repository page. | The public GitHub repository shows 515 commits, three stars and zero forks on the opened page. |
| Support | Bug reports, questions and feature requests are directed to GitHub Issues, while vulnerabilities use a private reporting channel. | Community users are directed to GitHub support, while Business includes email support. |
| System requirements | Documented fresh installations require systemd-based Linux on amd64 or arm64. | The repository recommends Linux with Docker Engine 24 or newer and Docker Compose v2, with at least 2 vCPU, 2 GB RAM and 15 GB SSD. |
DarkPhish plans
- CommunityFree
- EnterprisePriced on request
- ProfessionalPriced on request
SentryMail plans
- CommunityFree
- Business (2,501+ employees)€10 a year
- Business (1,001–2,500 employees)€11 a year
- Business (501–1,000 employees)€13 a year
- Enterprise (2,501+ employees)€14 a year
- Business (301–500 employees)€15 a year
Pick DarkPhish if…
DarkPhish is for teams conducting authorized phishing simulations or internal security work. It may also suit organizations seeking a self-hosted setup and control of campaign data.
Pick SentryMail if…
SentryMail suits organizations that want to host phishing simulations and awareness training within their own infrastructure. Its paid offerings are aimed at teams with at least 25 employees.