I believe Gophish can be improved in a few areas. First, the user interface could be made more modern and beginner-friendly. The current setup is simple, but for a new user, campaign creation, landing pages, and sending profiles can feel somewhat technical at first. Second, it would be helpful if Gophish added more built-in templates—for example, ready-made templates for HR emails, password expiry alerts, invoice scams, and cloud login alerts. This would save us time. The third area for improvement is reporting; reporting can be enhanced with more visual dashboards. It already shows opens, clicks, and submissions, but more detailed charts, risk scoring, department-wise comparison, and training progress would make it more useful for management reporting. My final suggestion is that built-in awareness training content would be a good improvement. After a user clicks a phishing link, Gophish could show short learning modules or a video explaining what mistake happened and how to avoid it next time. This could save some trainer's time explaining security awareness; it will alert users about what would happen if they click a link. Another useful improvement would be easier integration with tools like SIM, Slack, Teams, or email security gateways, which would help the security team connect phishing simulation results with their overall security monitoring. Overall, Gophish is very good for running phishing simulations, but it can become even better with improved UI, more templates, stronger reporting, and built-in training support. If Gophish brings some ready-made templates or better visual reporting, it would be much better for us and should also make integration with all kinds of security tools like SIM or email security gateways easier.
student at a comms service provider with 1,001-5,000 employees
Real User
Top 10
Jun 16, 2026
In my opinion, Gophish could be improved to better meet my needs or those of other users, but I did not really encounter any problems, so I found the tool well designed. Since I did not use it in a real environment, I do not really know how it goes if you want to use real email addresses, so on that point, I cannot really give my opinion. I do not really have any improvements in mind at the moment, but offering ready-made templates that we could use or examples of emails that we could directly use would be beneficial.
analista de segurança da informação at a financial services firm with 201-500 employees
Real User
Top 5
Jun 12, 2026
Gophish can be improved by adding more languages and maybe a web version for it, a SaaS platform.I rate it a seven because of the improvements I mentioned. I think if it were a SaaS platform and had more languages, including Brazilian Portuguese, it might be a ten.
Senior Information Technology Auditor at a tech vendor with 10,001+ employees
Real User
Top 10
Jun 9, 2026
Including more templates would be nice, and it would be beneficial to elaborate more on the user manual on how to use Gophish as some users have been struggling in using the tool. Gophish can be improved by elaborating more and putting more screenshots in providing user manuals and user instructions for users to make installation easier. I think including more phishing templates would be a needed improvement. Other improvements Gophish needs include having the setup instructions be more detailed and clear.
For the moment, I have nothing to suggest about Gophish; the application works very well and it offers many features. As you progress, you discover more and more options. I chose a rating of eight because there are always options to add and there are always upgrades that will be made.
Analista de TI at a educational organization with 1,001-5,000 employees
Real User
Top 10
May 18, 2026
I think that Gophish could be improved, but currently, all the functionalities it has and all the types of platforms that can be implemented are very interesting. For my part, I would not see any improvement. I would like to add nothing else about possible improvements, even if they are minor details or suggestions for the future.
Ingénieur en Sécurité at a tech vendor with 501-1,000 employees
Real User
Top 10
May 17, 2026
I think Gophish could be improved with a user-level function, meaning if the person is strong or weak, we send more or fewer awareness emails, and rely on real attacks in order to be able to create a template by itself. I have covered everything regarding the necessary improvements or points that could make Gophish even more effective in my view.
Especialista em Cibersegurança at a security firm with 5,001-10,000 employees
Real User
Top 10
May 17, 2026
I believe that Gophish can be improved by increasing the number of possible integrations. However, the main point would be to make Gophish modular in relation to the campaigns that are carried out in order to allow it to be used not only in pentests or phishing pentests but also in Red Team Operations. For that, there is a need to make it more targeted and to configure stealth features.
Senior Offensive Security Engineer at a computer software company with 1,001-5,000 employees
Real User
Top 10
May 16, 2026
For Gophish, there is a lack of integration with MFA and cookie captures that are more advanced attack methods. I have recently had to loop in Gophish with Evil GINX, which helps to capture the MFA and the sessions as well, so I think it could be improved from that aspect.
IT Secur IT Y at a manufacturing company with 11-50 employees
Real User
Top 20
May 15, 2026
The improvement I want to be made to Gophish is at the DNS level. When a user receives the link and clicks on it, I want to get feedback to confirm exactly whether the user clicked on the link or not. That is one point on which I want Gophish to be improved.
Gophish is an open-source phishing toolkit aimed at simplifying the creation and execution of phishing campaigns for cybersecurity professionals.Designed to cater to organizations seeking to enhance their security awareness, Gophish offers a streamlined process for launching phishing simulations. It provides a customizable environment, allowing users to simulate real-world phishing scenarios efficiently. With its user-friendly interface, even those with limited technical skills can easily...
I believe Gophish can be improved in a few areas. First, the user interface could be made more modern and beginner-friendly. The current setup is simple, but for a new user, campaign creation, landing pages, and sending profiles can feel somewhat technical at first. Second, it would be helpful if Gophish added more built-in templates—for example, ready-made templates for HR emails, password expiry alerts, invoice scams, and cloud login alerts. This would save us time. The third area for improvement is reporting; reporting can be enhanced with more visual dashboards. It already shows opens, clicks, and submissions, but more detailed charts, risk scoring, department-wise comparison, and training progress would make it more useful for management reporting. My final suggestion is that built-in awareness training content would be a good improvement. After a user clicks a phishing link, Gophish could show short learning modules or a video explaining what mistake happened and how to avoid it next time. This could save some trainer's time explaining security awareness; it will alert users about what would happen if they click a link. Another useful improvement would be easier integration with tools like SIM, Slack, Teams, or email security gateways, which would help the security team connect phishing simulation results with their overall security monitoring. Overall, Gophish is very good for running phishing simulations, but it can become even better with improved UI, more templates, stronger reporting, and built-in training support. If Gophish brings some ready-made templates or better visual reporting, it would be much better for us and should also make integration with all kinds of security tools like SIM or email security gateways easier.
In my opinion, Gophish could be improved to better meet my needs or those of other users, but I did not really encounter any problems, so I found the tool well designed. Since I did not use it in a real environment, I do not really know how it goes if you want to use real email addresses, so on that point, I cannot really give my opinion. I do not really have any improvements in mind at the moment, but offering ready-made templates that we could use or examples of emails that we could directly use would be beneficial.
Gophish can be improved by adding more languages and maybe a web version for it, a SaaS platform.I rate it a seven because of the improvements I mentioned. I think if it were a SaaS platform and had more languages, including Brazilian Portuguese, it might be a ten.
Including more templates would be nice, and it would be beneficial to elaborate more on the user manual on how to use Gophish as some users have been struggling in using the tool. Gophish can be improved by elaborating more and putting more screenshots in providing user manuals and user instructions for users to make installation easier. I think including more phishing templates would be a needed improvement. Other improvements Gophish needs include having the setup instructions be more detailed and clear.
For the moment, I have nothing to suggest about Gophish; the application works very well and it offers many features. As you progress, you discover more and more options. I chose a rating of eight because there are always options to add and there are always upgrades that will be made.
I think that Gophish could be improved, but currently, all the functionalities it has and all the types of platforms that can be implemented are very interesting. For my part, I would not see any improvement. I would like to add nothing else about possible improvements, even if they are minor details or suggestions for the future.
I think Gophish could be improved with a user-level function, meaning if the person is strong or weak, we send more or fewer awareness emails, and rely on real attacks in order to be able to create a template by itself. I have covered everything regarding the necessary improvements or points that could make Gophish even more effective in my view.
I believe that Gophish can be improved by increasing the number of possible integrations. However, the main point would be to make Gophish modular in relation to the campaigns that are carried out in order to allow it to be used not only in pentests or phishing pentests but also in Red Team Operations. For that, there is a need to make it more targeted and to configure stealth features.
For Gophish, there is a lack of integration with MFA and cookie captures that are more advanced attack methods. I have recently had to loop in Gophish with Evil GINX, which helps to capture the MFA and the sessions as well, so I think it could be improved from that aspect.
The improvement I want to be made to Gophish is at the DNS level. When a user receives the link and clicks on it, I want to get feedback to confirm exactly whether the user clicked on the link or not. That is one point on which I want Gophish to be improved.