A good template helps measure whether employees can identify suspicious links, sender issues, and urgency-based messages, which has very much surprised me. Regarding Gophish's AI capabilities, I see it mainly as a phishing simulation tool, not a fully-fledged AI platform. For governance and security, I believe the key is responsible and authorized use; campaigns should be approved, access should be limited, employee data must be protected, and results should be used for awareness training, not blaming people. If AI is used to create a template or analyze results, human review is important to ensure the content is safe, ethical, and aligned with company policy. Gophish is reliable for tracking campaign results such as opens, clicks, and submissions, but it is not mainly an AI-based tool. If AI is used to generate a template or analyze results, I would not trust the output blindly. AI can be useful, but it should be treated as a draft; a human should review the content for accuracy, tone, company policy, and ethical use before launching any campaign. I advise others looking into using Gophish to use it safely with authorization and permission from your company to avoid unauthorized access and misuse, as misuse could lead to severe consequences. I would rate this product nine out of ten.
student at a comms service provider with 1,001-5,000 employees
Real User
Top 10
Jun 16, 2026
In my opinion, the one I found most interesting was the one from CROUS because generally when students arrive here in France and they see this, they have to pay quickly since phishing attacks usually use an urgent tone. Since these students are afraid of losing their CROUS housing, they might quickly pay, just click on the link and proceed with the payment without necessarily realizing that it is a scam, especially since generally, people who come from certain African countries do not really have this concept of scam and phishing. The project is purely academic; I did it with fake email addresses that I managed with Mailpit. I created fake emails that do not exist, for people who do not exist, and I was the one who clicked on these emails myself, opened them, or accessed the links in the attachments of each email. Again, it was purely for academic purposes so I could learn because otherwise, with real email addresses, I cannot really do that, and also it is a bit complicated with Gmail. I preferred to do it with Mailpit and fake email addresses. Regarding campaign management and the use of templates, Gophish's interface seemed very intuitive to me from the start; everything was clear and self-explanatory. You have buttons for each thing, and it does not really require super advanced knowledge; it is very easy to handle. I do not really have any improvements in mind at the moment, but offering ready-made templates that we could use or examples of emails that we could directly use would be beneficial. I do not have any particular advice for other people who want to use Gophish in an academic or professional context; I would tell them to go for this tool because it is really easy to get started with. You do not need to be an expert to use it, and it helps a lot with dashboards and templates. My overall rating for this product is 9 out of 10.
analista de segurança da informação at a financial services firm with 201-500 employees
Real User
Top 5
Jun 12, 2026
My advice to others who are thinking about using Gophish is to use it because it is a very practical tool for running phishing tests, it is very easy to configure, and it is free. I would rate this product a seven out of ten.
Senior Information Technology Auditor at a tech vendor with 10,001+ employees
Real User
Top 10
Jun 9, 2026
Regarding Gophish's AI capabilities, I find its governance and security overall acceptable. Regarding Gophish's AI capabilities, I think the accuracy and reliability of output are good. I would recommend others looking into using Gophish to use it for performing their security awareness and campaigns because it is easier to install compared to other simulating tools. Providing more details and videos on proper tutorials would be helpful. I found this interview to be good; it is well-calibrated and conducted effectively. I would rate this review an 8 out of 10.
One piece of advice I give to those who need to use Gophish is to be patient and read extensively. If necessary, even follow user manuals to better grasp Gophish's functionality. Gophish is a good structure and a good technological innovation that deserves to be studied and much better known by the world because not everyone knows Gophish. Gophish is good and the structure is solid. I gave this product a rating of eight out of ten.
Analista de TI at a educational organization with 1,001-5,000 employees
Real User
Top 10
May 18, 2026
My advice to other professionals who are considering using Gophish is that it is a platform for people who are just starting out and do not have the resources and also do not have knowledge. It is an excellent platform to start with and learn about the world of awareness campaigns for collaborators. It is an easy-to-use, stable platform; it can be set up on different platforms, whether Windows or Linux, and it is easy to use since it has an integrated interface that is very easy to use and it has no cost. Gophish would be an interesting platform to start testing awareness platforms for phishing campaigns. I would give this platform a rating of 10.
Ingénieur en Sécurité at a tech vendor with 501-1,000 employees
Real User
Top 10
May 17, 2026
I do not know what advice to give to a company that is considering using Gophish regarding points to watch out for or anticipate. My overall rating for this product is 8 out of 10.
Especialista em Cibersegurança at a security firm with 5,001-10,000 employees
Real User
Top 10
May 17, 2026
I would say not to think twice and to use Gophish; it is a good tool with excellent features and a good dashboard, so there is no reason to keep looking elsewhere. I would rate this product 8 out of 10.
Senior Offensive Security Engineer at a computer software company with 1,001-5,000 employees
Real User
Top 10
May 16, 2026
My advice for others looking into using Gophish is that there are aspects of learning in terms of the template and making sure to set it up so that your domain does not get blocked; things of that nature. I would highly suggest putting Cloudflare in front. I would rate this product a 9 out of 10.
IT Secur IT Y at a manufacturing company with 11-50 employees
Real User
Top 20
May 15, 2026
I recommend that others use Gophish because it is a tool that is very easy to set up and open-source. I have no suggestions about Gophish, as it is satisfactory for my needs.
Gophish is an open-source phishing toolkit aimed at simplifying the creation and execution of phishing campaigns for cybersecurity professionals.Designed to cater to organizations seeking to enhance their security awareness, Gophish offers a streamlined process for launching phishing simulations. It provides a customizable environment, allowing users to simulate real-world phishing scenarios efficiently. With its user-friendly interface, even those with limited technical skills can easily...
A good template helps measure whether employees can identify suspicious links, sender issues, and urgency-based messages, which has very much surprised me. Regarding Gophish's AI capabilities, I see it mainly as a phishing simulation tool, not a fully-fledged AI platform. For governance and security, I believe the key is responsible and authorized use; campaigns should be approved, access should be limited, employee data must be protected, and results should be used for awareness training, not blaming people. If AI is used to create a template or analyze results, human review is important to ensure the content is safe, ethical, and aligned with company policy. Gophish is reliable for tracking campaign results such as opens, clicks, and submissions, but it is not mainly an AI-based tool. If AI is used to generate a template or analyze results, I would not trust the output blindly. AI can be useful, but it should be treated as a draft; a human should review the content for accuracy, tone, company policy, and ethical use before launching any campaign. I advise others looking into using Gophish to use it safely with authorization and permission from your company to avoid unauthorized access and misuse, as misuse could lead to severe consequences. I would rate this product nine out of ten.
In my opinion, the one I found most interesting was the one from CROUS because generally when students arrive here in France and they see this, they have to pay quickly since phishing attacks usually use an urgent tone. Since these students are afraid of losing their CROUS housing, they might quickly pay, just click on the link and proceed with the payment without necessarily realizing that it is a scam, especially since generally, people who come from certain African countries do not really have this concept of scam and phishing. The project is purely academic; I did it with fake email addresses that I managed with Mailpit. I created fake emails that do not exist, for people who do not exist, and I was the one who clicked on these emails myself, opened them, or accessed the links in the attachments of each email. Again, it was purely for academic purposes so I could learn because otherwise, with real email addresses, I cannot really do that, and also it is a bit complicated with Gmail. I preferred to do it with Mailpit and fake email addresses. Regarding campaign management and the use of templates, Gophish's interface seemed very intuitive to me from the start; everything was clear and self-explanatory. You have buttons for each thing, and it does not really require super advanced knowledge; it is very easy to handle. I do not really have any improvements in mind at the moment, but offering ready-made templates that we could use or examples of emails that we could directly use would be beneficial. I do not have any particular advice for other people who want to use Gophish in an academic or professional context; I would tell them to go for this tool because it is really easy to get started with. You do not need to be an expert to use it, and it helps a lot with dashboards and templates. My overall rating for this product is 9 out of 10.
My advice to others who are thinking about using Gophish is to use it because it is a very practical tool for running phishing tests, it is very easy to configure, and it is free. I would rate this product a seven out of ten.
Regarding Gophish's AI capabilities, I find its governance and security overall acceptable. Regarding Gophish's AI capabilities, I think the accuracy and reliability of output are good. I would recommend others looking into using Gophish to use it for performing their security awareness and campaigns because it is easier to install compared to other simulating tools. Providing more details and videos on proper tutorials would be helpful. I found this interview to be good; it is well-calibrated and conducted effectively. I would rate this review an 8 out of 10.
One piece of advice I give to those who need to use Gophish is to be patient and read extensively. If necessary, even follow user manuals to better grasp Gophish's functionality. Gophish is a good structure and a good technological innovation that deserves to be studied and much better known by the world because not everyone knows Gophish. Gophish is good and the structure is solid. I gave this product a rating of eight out of ten.
My advice to other professionals who are considering using Gophish is that it is a platform for people who are just starting out and do not have the resources and also do not have knowledge. It is an excellent platform to start with and learn about the world of awareness campaigns for collaborators. It is an easy-to-use, stable platform; it can be set up on different platforms, whether Windows or Linux, and it is easy to use since it has an integrated interface that is very easy to use and it has no cost. Gophish would be an interesting platform to start testing awareness platforms for phishing campaigns. I would give this platform a rating of 10.
I do not know what advice to give to a company that is considering using Gophish regarding points to watch out for or anticipate. My overall rating for this product is 8 out of 10.
I would say not to think twice and to use Gophish; it is a good tool with excellent features and a good dashboard, so there is no reason to keep looking elsewhere. I would rate this product 8 out of 10.
My advice for others looking into using Gophish is that there are aspects of learning in terms of the template and making sure to set it up so that your domain does not get blocked; things of that nature. I would highly suggest putting Cloudflare in front. I would rate this product a 9 out of 10.
I recommend that others use Gophish because it is a tool that is very easy to set up and open-source. I have no suggestions about Gophish, as it is satisfactory for my needs.