The title of this article was supposed to be “Top 9 Free Phishing Simulators.” However, after much searching, trying, visiting of broken links, filling out forms and signing up for mailing lists, it became clear that the combination of “free” and “top” really narrows down the selection to very few actual choices for phishing training. The final list does not include any of the fishy (pardon the pun) apps that let you create a fake website or phishing site for collecting data. Nor are we including any of the free managed campaigns offered by so many now popular phishing services. We wanted to focus on tools that allow you to actually run a phishing campaign on your own, i.e. create and send at least one phishing email to a real recipient.
Basically, if you are looking for a free phishing simulator for your company, you are down to three choices:
Simple tools that will allow you to craft a simple email message and send it to one or several recipients using a specified mail server. Features like reporting or campaign management are often not an option, making them more like penetration testing tools than phishing simulators. Open-source phishing platforms.