- Home
- Cybersecurity Training Platforms
- Cofense PhishMe
Cofense PhishMe
Arlington, Virginia, United States
What it is
Cofense PhishMe is a web-based phishing simulation and security awareness training platform for organizations. Its simulations draw on real phishing data and can reproduce smishing, vishing, and QR-code phishing to help measure employee readiness and locate training gaps. Content and reinforcement can be tailored to areas where employees need more practice. Reporting and analytics track performance and risk, and one-click reporting sends information to a global intelligence network. The product includes phishing simulations, risk scoring, a phish reporting button, and automated training. Cofense says PhishMe is part of its Technology Alliance Program, which connects partner solutions for employee readiness, intelligence, and incident response. Data travels over HTTPS and is encrypted at rest with AES-256; simulation data includes click-related statistics, while employee-entered data is not collected or stored. Security controls include role-based configuration, auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on.
For and against
For
- Models smishing, vishing, and QR-code phishing
- Tailors reinforcement to employee training needs
- Includes risk scoring and a phish reporting button
- Encrypts data at rest using AES-256
- Offers a free plan at no cost
Against
- Free edition hosting is limited to Ashburn
The verdict
PhishMe combines phishing simulations, tailored training, and reporting for organizational security awareness programs.
Who it suits
It suits organizations seeking phishing simulations and targeted security awareness training, including teams that need reporting on readiness and risk. Cofense describes it as serving organizations of different sizes across multiple industries.
Plans and prices
Cofense PhishMe Free
No specific plan limits stated on the opened page
Read 9 Oct 2026 · cofense.com
Cofense PhishMe Enterprise
No specific plan limits stated on the opened page
Read 9 Oct 2026 · cofense.com
Cofense PhishMe Small Business Edition (SBE)
No specific plan limits stated on the opened page
Read 9 Oct 2026 · cofense.com
On the record
- Access controls
- Cofense says PhishMe provides role-based configuration, full auditing, and multi-factor authentication; Enterprise also supports SAML 2.0 single sign-on.cofense.com · read 9 Oct 2026
- Audience
- Cofense describes PhishMe as an enterprise-grade SaaS phishing simulation solution for organizations and says it serves customers across multiple industries and of all sizes.cofense.com · read 9 Oct 2026
- Data protection
- PhishMe data is transmitted over HTTPS and encrypted at rest using AES-256; simulation data includes click-related statistics, while data entered by employees is not collected or stored.cofense.com · read 9 Oct 2026
- Hosting
- PhishMe is hosted on AWS in Ashburn, Montreal, Frankfurt, Sydney, and Tokyo, with the Free edition hosted only in Ashburn.cofense.com · read 9 Oct 2026
- Integrations
- Cofense describes PhishMe as part of its Technology Alliance Program, which integrates partner solutions for employee readiness, intelligence, and incident response.cofense.com · read 9 Oct 2026
- Purpose
- PhishMe uses phishing simulations to measure employee readiness, identify training gaps, and build secure behavior.cofense.com · read 9 Oct 2026
- Reporting
- It provides board-ready reporting and analytics to track performance, measure risk, and refine training.cofense.com · read 9 Oct 2026
- Reporting workflow
- The product page says one-click reporting feeds a global intelligence network.cofense.com · read 9 Oct 2026
- Security certification
- Cofense says its SOC 2 Type 2 certification covers PhishMe, and the report is available through a sales representative under an NDA.cofense.com · read 9 Oct 2026
- Support
- Cofense lists customer support at [email protected] and offers product demonstrations by request.cofense.com · read 9 Oct 2026
- Targeted learning
- The platform can tailor content and deliver reinforcement based on where employees need more practice.cofense.com · read 9 Oct 2026
- Threat-based training
- Its simulations use real phishing data and can replicate smishing, vishing, and QR-code phishing.cofense.com · read 9 Oct 2026
