Phished
Leuven platform with automated, AI-tailored simulations and training for repeat clickers
Quick Overview
| Company | Phished BV |
|---|---|
| Category | Security Awareness Training |
| Headquarters | Leuven, Belgium |
| EU Presence | EU (Belgium) |
| Data Location | Application hosted by cloud providers in the EU, named as Google and Microsoft; network and DNS protection by Cloudflare |
| Open Source | No |
| Compliance | ISO 27001 certified (certificate downloadable on the security page); application hosted on SOC 2 certified infrastructure |
| Pricing | Three plans, Core, Advanced and All-in-one, on the pricing page; the amounts are not shown and are given on request |
| Replaces | KnowBe4, Proofpoint Security Awareness Training |
Detailed Review
Phished is published by Phished BV at Bondgenotenlaan 138 in Leuven, registered in the Belgian Crossroads Bank of Enterprises under number 0735.908.019. The company says it trains two million users in 7,100 organisations together with more than 400 partners, which points to a channel-led model.
The core idea is automation: simulations are tailored with AI to the organisation, progress with each employee, and run without administrator effort, with gamified microlearning in between. The website is available in English, French, Dutch, Spanish and German, and the legal notice, privacy policy and cookie policy are published on it.
Its distinctive feature is Zero Incident Mail, a secure environment in which a person who clicks a link or submits data is trained inside a contained mail experience.
Advanced adds repeat offender training and user certificates from Bronze to Platinum, and All-in-one adds NIS 2 and GDPR topics, custom training, a Behavioral Risk Score and Power BI reporting. The security page offers the ISO 27001 certificate for download, states hosting by cloud providers in the EU (Google and Microsoft) and lists SOC 2 certified infrastructure.
The pricing page shows the three plans, Core, Advanced and All-in-one, with a currency selector and a request for advice, but no amount in the page text. Multi-factor authentication for the application is optional according to the security page, which a security-minded buyer will want switched on.
Compared with SoSafe, Phished states fewer content and language figures; compared with Hoxhunt it is more automated and reaches fewer channels. The security page also states encryption in transit with TLS 1.2 and 1.3 and at rest with AES-256, logical tenant separation and annually tested disaster recovery.
What Phished does well
- Phished BV is registered in Belgium under enterprise number 0735.908.019
- ISO 27001 certificate available for download on the security page
- Application hosted by cloud providers in the EU, named as Google and Microsoft
- Zero Incident Mail contains clicks inside a secure training environment
- Core plan states compliance with NIS2, NIST, DORA and ISO 27001
Where Phished falls short
- No amount on the pricing page; each plan is quoted on request
- Multi-factor authentication for the application is optional, not enforced
- Runs on Google and Microsoft cloud, which are US providers in EU regions
- Partner-led model, so the buying route may run through a reseller
Standout feature. Phished is the only platform here that trains a person who clicks inside a contained mail environment, called Zero Incident Mail.
Pros and Cons
Pros
- Phished BV is registered in Belgium under enterprise number 0735.908.019
- ISO 27001 certificate available for download on the security page
- Application hosted by cloud providers in the EU, named as Google and Microsoft
- Zero Incident Mail contains clicks inside a secure training environment
- Core plan states compliance with NIS2, NIST, DORA and ISO 27001
Cons
- No amount on the pricing page; each plan is quoted on request
- Multi-factor authentication for the application is optional, not enforced
- Runs on Google and Microsoft cloud, which are US providers in EU regions
- Partner-led model, so the buying route may run through a reseller
Alternatives to Phished
Frequently Asked Questions
What is Phished?
Phished is published by Phished BV at Bondgenotenlaan 138 in Leuven, registered in the Belgian Crossroads Bank of Enterprises under number 0735.908.019. The company says it trains two million users in 7,100 organisations together with more than 400 partners, which points to a channel-led model.
The core idea is automation: simulations are tailored with AI to the organisation, progress with each employee, and run without administrator effort, with gamified microlearning in between. The website is available in English, French, Dutch, Spanish and German, and the legal notice, privacy policy and cookie policy are published on it.
Where is Phished based?
Phished operates from Leuven, Belgium, which places it under EU (Belgium). Compliance: ISO 27001 certified (certificate downloadable on the security page); application hosted on SOC 2 certified infrastructure.
What does Phished cost?
Three plans, Core, Advanced and All-in-one, on the pricing page; the amounts are not shown and are given on request.
Who is Phished best for?
Companies that want automated, per-employee simulations and a downloadable ISO 27001 certificate. Phished is the only platform here that trains a person who clicks inside a contained mail environment, called Zero Incident Mail.
What are the drawbacks of Phished?
No amount on the pricing page; each plan is quoted on request. Multi-factor authentication for the application is optional, not enforced. Runs on Google and Microsoft cloud, which are US providers in EU regions. Partner-led model, so the buying route may run through a reseller.
Is Phished a good alternative to KnowBe4?
Phished is built as a European alternative to KnowBe4: Leuven platform with automated, AI-tailored simulations and training for repeat clickers. It will not be a like-for-like feature match in every respect, so check the review above for where the two genuinely differ before switching.
How does Phished compare to other Security Awareness Training tools?
Phished is one of several European Security Awareness Training tools we cover. It is most often compared with KnowBe4, Proofpoint Security Awareness Training.