Gophish

Open source

Open-source phishing simulation framework for measuring and training against phishing risk.

by Gophish open-source projectOfficial site ↗Source code ↗

Pricing: free
Free tier: true
License: open-source
Open source: Yes

Editorial review

Gophish has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Tags(open-source;cloud-native): phishing simulation, security awareness, open sourceVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): self-hostedVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): freeVerified
Source repository(HTTPS URL): https://github.com/gophish/gophishVerified
SPDX license IDs(Apache-2.0;MIT): MITVerified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): create or import pixel-perfect phishing templates with a full HTML editor, launch and schedule phishing campaigns, track email opens, link clicks, and submitted credentials per recipient, near real-time results that can be exported for reports, import existing websites and emails, powered by a REST API with a Python clientVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Security teams that want a free, self-hosted phishing simulation framework with a web UI and REST APIVerification pending
Primary use cases(build;monitor;automate): test your organization's exposure to phishing, phishing simulation campaigns against employees, tracking and reporting phishing susceptibilityVerification pending
Skill level(beginner;intermediate;advanced;specialist): intermediateVerification pending

Lifecycle · Versioning

Current version(1.12.3): 0.12.1Verified
Maintenance status(active;maintenance;deprecated;EOL;archived): maintenanceVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): individualVerification pending

Also categorized in

Security Awareness Training Platforms

User reviews

Review policy

No published reviews yet.