- Home
- Phishing Simulation Software
- CanIPhish
CanIPhish
Queensland, Australia
What it is
CanIPhish provides phishing simulations and adaptive security awareness training for organizations. It supports email, voice, and web exercises, with more than 140 ready-to-go scenarios. Campaign templates can track clicks, credential entries, attachment opens, and replies, with domain spoofing support. The platform can create customizable phishing websites by adapting templates or building bespoke sites. Its AI voice-phishing capability can hold dynamic conversations across languages, accents, and personas, and can clone a voice from a short audio sample. Autonomous phishing mode uses OSINT, user context, and historical data to select content for each person and time. Integrations and add-ons include Microsoft Entra ID, Google Workspace, Gmail Report Phish, and Outlook Report Phish. The public API can read campaign results, human-risk scores, dark-web breaches, and domain-supply-chain posture, and manage campaigns, employee lists, content, and settings. The Free plan is listed as free for up to 10 employees. Professional is free with at least 11 employees; Enterprise is free, annual only, with at least 25 employees.
For and against
For
- Supports email, voice, and web simulations.
- Offers more than 140 ready-to-go scenarios.
- Campaigns can track clicks and credential entries.
- The public API can manage campaigns and employee lists.
Against
- Free plan is limited to 10 employees.
- Professional requires at least 11 employees.
- Enterprise requires at least 25 employees and annual billing.
- Unique email addresses are limited by subscription employee count.
The verdict
CanIPhish combines multichannel simulations, campaign tracking, and training with a public API. The plan employee thresholds and monthly unique-address limit are important constraints to review.
Who it suits
CanIPhish may suit organizations, managed service providers, and enterprise customers seeking phishing exercises and security awareness training. Its listed plans set employee minimums or limits.
Plans and prices
Enterprise
minimum 25 employees · includes Professional features · custom quote over 1,000 employees
Read 19 Oct 2026 · caniphish.com
Free
up to 10 employees · no credit card
Read 19 Oct 2026 · caniphish.com
Professional
minimum 11 employees · includes Free features
Read 19 Oct 2026 · caniphish.com
On the record
- AI selection
- Autonomous phishing mode uses OSINT, user context and historical data to select content for each person and time.caniphish.com · read 1 Oct 2026
- AI website generator
- Enterprise users can generate or clone customizable simulated phishing websites using prompts, screenshots or URLs.help.caniphish.com · read 19 Oct 2026
- API
- The public API can read campaign results, human-risk scores, dark-web breaches and domain-supply-chain posture, and manage campaigns, employee lists, content and platform settings.help.caniphish.com · read 1 Oct 2026
- API authentication and limits
- API calls require X-API-Key and X-Email-Address headers, consume quota units and may require Professional or Enterprise entitlements for writes.help.caniphish.com · read 19 Oct 2026
- API documentation depth
- CanIPhish provides an interactive reference with endpoint schemas, parameters and a try-it console, plus workflow examples in its help article.help.caniphish.com · read 19 Oct 2026
- Campaign tracking
- Phishing templates track clicks, credential entries, attachment opens and replies, with domain spoofing support.caniphish.com · read 1 Oct 2026
- Campaign types
- Campaigns can deliver phishing, training, or combined phishing-and-training programs.help.caniphish.com · read 19 Oct 2026
- Company database facts
- Crunchbase describes CanIPhish as an Australian company founded in 2020 with 1–10 employees and headquarters in Peregian Beach, Queensland.crunchbase.com · read 19 Oct 2026
- Company facts
- LinkedIn lists CanIPhish as privately held, founded in 2020, headquartered in Peregian Beach, Queensland, with 2–10 employees.au.linkedin.com · read 19 Oct 2026
- Conversational phishing
- The PhishAI engine conducts back-and-forth email conversations before attempting a simulated malicious action.help.caniphish.com · read 19 Oct 2026
- Customer profile
- The platform is used by managed service providers, enterprise customers and organizations of all sizes across more than 65 countries.caniphish.com · read 1 Oct 2026
- Data residency
- Configurable storage locations include the United States, Australia, United Kingdom, Canada, South Africa, Germany, United Arab Emirates, Singapore, India and Brazil.caniphish.com · read 19 Oct 2026
- Deepfake voice
- Its AI voice-phishing capability can hold dynamic conversations across languages, accents and personas and clone a voice from a short audio sample.caniphish.com · read 1 Oct 2026
- Documentation and support
- Support resources include a Zendesk knowledge base, video walkthroughs, email, live chat and plan-dependent customer support.help.caniphish.com · read 19 Oct 2026
- Email delivery
- Email delivery can use CanIPhish SMTP, Google Workspace Direct Email Injection, Microsoft 365 Direct Email Injection or a customer-controlled third-party SMTP server.help.caniphish.com · read 1 Oct 2026
- Integrations
- Documented integrations include Microsoft Entra ID, Google Workspace, Gmail and Outlook report-phish add-ons, Vanta, Drata and webhooks.caniphish.com · read 19 Oct 2026
- Legal maker
- The subscription agreement identifies the maker as Can I Phish Pty Ltd, ABN 24 647 802 266.caniphish.com · read 19 Oct 2026
- Licence
- The pages describe a proprietary subscription cloud service and do not publish an open-source licence.caniphish.com · read 19 Oct 2026
