Gophish
Open-source, self-hosted phishing framework for testing an organisation's exposure to phishing emails.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
1 more ways to get Gophish
Other download sites
Run by third parties, not by The Gophish contributors. Prefer the official page above when it works.
About Gophish
Gophish lets security teams run their own phishing simulation campaigns. You create or import email templates and landing pages in a web interface with an HTML editor, choose targets, and launch or schedule campaigns that send in the background.
Results update in near real time, with a timeline per recipient covering email opens, link clicks and submitted credentials, and can be exported for reports. It ships as a single Go binary for Windows, macOS and Linux and exposes a full REST API with a Python client.
Strengths
- Single binary install on Windows, macOS and Linux
- Web UI with HTML template editor and site import
- Real-time per-recipient results with export
- Full REST API with a Python client
Limitations
- Intended for authorized testing of your own organisation only
- You supply and maintain your own mail sending and server setup
- No built-in training content
Details
- Pricing
- FreeFree and open source.
- License
- Open source, license not stated
- Developer
- The Gophish contributors
- Platforms
- Windows, macOS, Linux, Self-hosted
- How it runs
- Downloadable app, Self-hosted
- Account
- Not required
- Best suited for
- Security teams running in-house phishing simulations on their own server
- Categories
- Security tools, IT administration
- Last verified
- Added
- Provenance
- Selected from the TechWalrus Resource Hub (Enterprise & Workplace IT); facts checked against the developer's own pages, 2 sources on file.