SMARTFENSE Simulation Tools

SMARTFENSE Simulation Tools is the campaign-simulation component of SMARTFENSE, a SaaS security awareness platform. It supports phishing, ransomware, QR code, smishing, and USB drop scenarios. Teams can edit simulation content or build scenarios from existing material or from scratch. Reports measure organizational vulnerability and changes in user behavior, with risk scoring by user, group, functional area, hierarchical level, and organization. A Phishing Report Button lets users flag suspicious messages for incident response review and tracks reports of SMARTFENSE simulations in real time. Campaign automation, training content, SIEM export, and a documented REST API are listed. The API uses OAuth 2.0 and JSON for campaign results, risk scoring, and user management. Base integrations include Microsoft Entra ID, Google, Auth0, LDAP, and SAML 2.0; other integrations require a separate contract. The platform requires internet access and allowlisting of its email and browsing domains. Pricing is available on request.

SMARTFENSE Simulation Tools combines varied security simulations with reporting, risk scoring, and API access. Check integration needs and email-client support before choosing it.

It suits organizations seeking security-awareness simulations with reporting and risk scoring across teams. Organizations needing additional integrations should note that those require a separately contracted component.

Overview

SMARTFENSE Simulation Tools is a SaaS security-awareness product for organizations that want to run simulated attacks and measure how people respond. It is best suited to security teams that need varied campaign formats alongside risk scoring and reporting. Its breadth is appealing, but custom pricing, domain allowlisting, and email-client constraints make it a less natural fit for teams seeking a low-friction, self-serve option.

Key features

Campaigns and tailored content

Campaigns span phishing, ransomware, QR codes, smishing, and USB drops, with automation across channels. Teams can edit simulation content and build scenarios from existing material or from scratch, giving them room to make exercises relevant to their organization. Training content is also included. That combination suits programs that want simulations and learning content in one platform, though organizations should assess whether its content fits their audience: SMARTFENSE says it is designed for Latin America, Spain, Portugal, and Italy.

Measurement and response

Reports measure organizational vulnerability and changes in user behavior. Risk scoring can be viewed across users, groups, functional areas, hierarchical levels, and the organization, which gives teams several ways to identify where follow-up may be needed. The Phishing Report Button lets users flag suspicious messages for incident response review and captures real-time metrics on reports of SMARTFENSE simulations. SIEM export is included, making the reporting and response features relevant to teams that need to pass results into broader security workflows.

Integrations and API

Base-platform integrations include Microsoft Entra ID, Google, Auth0, LDAP, and SAML 2.0. Moodle, Slack, Microsoft Teams, SAP SuccessFactors, Vanta, and BeyGoo are part of a separately contracted integrations component, so organizations needing those connections should account for that arrangement. The documented REST API uses OAuth 2.0 and JSON and provides access to campaign results, risk scoring, and user management. That is useful for teams connecting the platform to internal systems, but the additional integration component may complicate procurement.

Trust and operational requirements

SMARTFENSE says it received a CCN qualification for handling sensitive information under Spain’s National Security Scheme and participates in the Cloud Security Alliance program. The platform requires internet access; the minimum listed bandwidth is 1 MB, and its email and browsing domains must be allowlisted for proper operation. The Report Button supports Gmail without minimum requirements and specified Outlook clients, including Outlook on the web, new Outlook for Windows, Outlook LTSC 2024 and 2021, and Outlook for iOS and Android. Outlook for macOS is not covered by technical support, a material limitation for organizations standardized on that client.

Pricing

SMARTFENSE Simulation Tools is a paid product with custom pricing. No published price, seat allowance, quota, trial length, or renewal term is stated. Teams should request a quote and confirm license limits and the cost of the separately contracted integrations component before comparing budgets.

Platforms

The platform is SaaS and requires internet access. SMARTFENSE lists Windows, Mac OS, and GNU/Linux as supported operating systems for platform use. Its platform listing also includes Android, iOS, API, and web; this does not remove the need to verify that the specific email client used by staff is supported by the Phishing Report Button.

Who it's for

This is a strong candidate for organizations that want multichannel simulations, editable scenarios, training content, risk scoring, and reporting in a single security-awareness program. Its API and broad base-platform integrations also suit teams that plan to connect campaign data or user management to other systems. It is less suitable for organizations that need a transparent self-serve price, cannot allowlist platform domains, rely on Outlook for macOS for phishing reports, or need integrations that require a separate contract. SMARTFENSE says more than 1,000 organizations use its platform across more than 25 countries; it was founded in 2016 in Córdoba, Argentina, and has an office in León, Spain.

Pros and cons

• Pros: Five simulation types and editable or custom-built scenarios support tailored campaigns across different attack patterns.
• Pros: Reporting, risk scoring at several organizational levels, the Phishing Report Button, and SIEM export help connect simulations with measurement and response.
• Pros: A documented API exposes campaign results, risk scoring, and user management for integration work.
• Cons: Custom pricing and unstated license limits make it difficult to judge cost or compare plans without a quote.
• Cons: Several named integrations require a separately contracted component, which may add procurement steps.
• Cons: Allowlisting is required, and Outlook for macOS is outside technical support for the Report Button.

Alternatives

Phishing Simulation Software is a useful starting point for comparing products in this category. Choose Hoxhunt instead if you want a paid option spanning Android, iOS, macOS, web, and Windows; its custom quote depends on employee count and required capabilities. Infosec IQ may suit teams looking for an LMS integration and SCORM support in its Enterprise plan, or an Infosec Skills team subscription in its higher tier. Consider Proofpoint Email DLP and Encryption when you are evaluating paid email data-loss prevention and encryption software rather than a security-awareness simulation platform. Kaspersky Research Sandbox is a different fit for teams seeking cloud or on-premise deployment, including support for air-gapped environments. Shirudo is another paid option available on web, iOS, and Android. CanIPhish is worth comparing if a freemium product with a free tier for up to 10 employees is a priority; its Professional plan is priced as free with a minimum of 11 employees. Mimecast Data Leak Prevention is an alternative for web-based data-loss prevention, with a Professional plan that includes one SaaS/cloud exfiltration detector and 30 days of historical activity. Trellix Data Loss Prevention may be a better match when the requirement is enterprise DLP across endpoints, email, web, networks, and data storage, with on-premises or SaaS management.

Verdict

Choose SMARTFENSE Simulation Tools if your organization wants varied, customizable security simulations tied to organizational risk scoring, user reporting, and API access. Its main advantage is the breadth of that awareness workflow; its main reasons to look elsewhere are custom pricing, extra contracting for some integrations, domain allowlisting, and the Outlook for macOS support gap.