Phished review

Phished is a security awareness and phishing-simulation platform built to address employee-related security risks. It automates phishing tests, with simulations described as localized and tailored to employees’ skill levels, then pairs them with ongoing training and guidance. The homepage also lists incident-response tools and employee guidance across email, browsers and other channels.

Its training product, Phished Academy, covers 360 cybersecurity topics and offers certificates. Other listed capabilities include Threat Alerts, which notify employees about threats and provide response guides, and Phished Assistant, which offers guidance across channels. Zero Incident Mail is described as a secure environment for containing threats from simulated clicks or malware downloads. The platform also lists automated incident response. That is a broad set of functions, but the published product information does not explain how incident response works or which integrations are required.

The product brings simulations, training and employee-facing guidance into one package. That can make it easier to run recurring awareness work than managing a phishing test in one tool and training in another, though the published sources do not establish how much administration it saves.

The listed plan structure gives buyers a rough way to match features to their program. Core includes automated AI-driven simulations, a Report Button, practical microlearnings, Threat Alerts, and an administrator dashboard and reporting. Advanced adds repeat-offender training, Zero Incident Mail, user certificates from Bronze to Platinum, and cyber hygiene for apps and devices. All-in-One adds custom training topics, the ability to build training, a Behavioral Risk Score and custom Power BI reporting.

The pricing page lists a starting price of $175 per month, which gives buyers at least an initial figure to investigate. The product description also says simulations are localized and tailored to employee skill levels, while Academy offers 360 topics. Those details suggest coverage beyond a simple library of generic phishing emails, but buyers should confirm what is included in a demo and quote.

The biggest buying issue is price clarity. The pricing page lists a starting price of $175 per month, but does not state whether that is monthly or annual billing. It also does not provide exact prices for Core, Advanced or All-in-One in the published information. The plan descriptions do not publish learner limits, minimum seat counts, simulation-volume caps or other usage limits, so we would ask for those in writing before comparing quotes. There is no free plan; trial availability is not published.

Feature gates matter, too. Zero Incident Mail and repeat-offender training are listed under Advanced, while custom training and Behavioral Risk Score are reserved for All-in-One. Buyers who need those functions should not assume the starting price covers them. The Reddit threads we read do not offer substantive Phished user feedback on setup, engagement or support. And training should not be treated as a substitute for account protections: users in one r/sysadmin thread describe attackers succeeding even when employees approve MFA prompts. Phished’s materials here do not specify how it fits with those controls.

Phished lists a starting price of $175 per month, but the pricing details do not say whether that means monthly billing or an annual commitment. They also do not give separate prices for Core, Advanced or All-in-One, so the cost jump between tiers is not published.

Core includes automated AI-driven simulations, a Report Button, practical microlearnings, Threat Alerts, and an administrator dashboard with reporting. Advanced adds repeat-offender training, Zero Incident Mail, user certificates, and cyber hygiene for apps and devices. All-in-One adds custom topics, the ability to build training, a Behavioral Risk Score, and custom Power BI reporting.

The pricing details list no add-ons. They also do not specify seat limits or a free trial; there is no free plan listed. Treat $175 as a starting point, not a complete quote. Get the billing term, user count, and price for each tier in writing before comparing it with another provider.

The published product information describes automated phishing simulations, training, employee guidance, threat alerts, and incident-response tools. It does not explain how to import users or training history, export records, or move existing simulations. That leaves migration effort and data portability unclear; ask Phished what it can transfer and in what format before signing or cancelling another service.

The pricing details do not publish seat limits, and the published material does not include Reddit posts or comments about why customers leave. We therefore can’t point to a reported migration problem or a recurring reason for churn. That lack of evidence is not proof that switching is difficult—or easy.

For a move in either direction, confirm how user accounts, completion records, certificates, reporting data, and simulation settings can be exported or recreated. Also ask whether the $175 starting price changes with user count and which features require Advanced or All-in-One. Those answers will matter more than the headline price when you compare vendors.