Alternatives to Gophish
Open-source, self-hosted phishing framework for testing an organisation's exposure to phishing emails. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Gophish
Open-source, self-hosted phishing framework for testing an organisation's exposure to phishing emails.
Replacements
Listings that take over the same core job as Gophish.
CanIPhish
Web platform for running phishing simulations and security awareness training for an organisation's employees.
CanIPhish is a hosted freemium service rather than a self-hosted open-source binary, adding voice and web simulations and over 140 ready-made scenarios, with campaign data kept by the provider.
Similar software
Related functionality, not a direct replacement.
dnstwist
A domain permutation engine that finds lookalike domains used for typosquatting, phishing and impersonation.
PhishTank
Community-run phishing URL database where you can check, submit and verify suspected phishing sites.
Have I Been Pwned
A service that checks whether your email address or password appeared in known data breaches.
Mozilla Monitor
Free web service from Mozilla that checks whether your email appears in known data breaches.
urlscan.io
Sandbox for the web that loads a URL and records screenshots, requests and indicators.
