CanIPhish

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

CanIPhish provides AI-powered phishing simulations and adaptive security awareness training. It supports email, voice and web exercises, with more than 140 prepared scenarios. Campaign templates can record clicks, credential entries, attachment opens and replies, and support domain spoofing. The platform can create customizable phishing sites by adapting templates or building new ones. Its voice-phishing capability can conduct conversations across languages, accents and personas, and clone a voice from a short audio sample. An autonomous mode uses OSINT, user context and historical data to choose content for individuals and timing. Integrations include Microsoft Entra ID, Google Workspace, Gmail Report Phish and Outlook Report Phish. The public API can access campaign results, human-risk scores, dark-web breaches and domain-supply-chain posture, as well as manage campaigns, employee lists, content and settings. Plans are listed as Free at 0.00 USD per free, billed forever, up to 10 employees; Professional at 0.00 USD per month, minimum 11 employees; and Enterprise at 0.00 USD per month, billed annual only, minimum 25 employees.

Who it is for

It suits managed service providers and organizations seeking phishing exercises and security awareness training. Its API, integrations and configurable data residency may matter to teams fitting it into existing systems.

What is good

Email, voice and web simulations
More than 140 ready-to-go scenarios
API reads risk scores and manages campaigns
Configurable data residency locations

What to know first

Unique email limits depend on subscription employee count
No free trial is listed

Verdict

CanIPhish combines multi-channel simulations, adaptive training and campaign management with public API access. The listed plans start with up to 10 employees on Free, while email reach is tied to subscription employee count.

Compared on phishing simulation software

Free plan: Yescaniphish.com
Simulation channels: multichannelcaniphish.com
Campaign automation: Yescaniphish.com
Landing page builder: Yescaniphish.com
Risk scoring: Yescaniphish.com
Training content: Yescaniphish.com
API access: Yescaniphish.com

Facts

Purpose: CanIPhish provides AI-powered phishing simulations and adaptive security awareness training to build an organization’s human firewall.caniphish.com · 1 Oct 2026
Simulation types: The platform supports hyper-realistic email, voice and web phishing simulations.caniphish.com · 1 Oct 2026
Phishing scenarios: CanIPhish offers more than 140 ready-to-go phishing scenarios.caniphish.com · 1 Oct 2026
Campaign tracking: Phishing templates track clicks, credential entries, attachment opens and replies, with domain spoofing support.caniphish.com · 1 Oct 2026
Deepfake voice: Its AI voice-phishing capability can hold dynamic conversations across languages, accents and personas and clone a voice from a short audio sample.caniphish.com · 1 Oct 2026
Website generator: CanIPhish generates customizable phishing websites by cloning templates or building bespoke sites from scratch.caniphish.com · 1 Oct 2026
AI selection: Autonomous phishing mode uses OSINT, user context and historical data to select content for each person and time.caniphish.com · 1 Oct 2026
Integrations: Included integrations and add-ons include Microsoft Entra ID, Google Workspace, Gmail Report Phish and Outlook Report Phish.caniphish.com · 1 Oct 2026
API: The public API can read campaign results, human-risk scores, dark-web breaches and domain-supply-chain posture, and manage campaigns, employee lists, content and platform settings.help.caniphish.com · 1 Oct 2026
Security assurance: Sensiba finalized CanIPhish’s SOC 2 Type 2 attestation report on January 22, 2026, covering security, availability and confidentiality controls.caniphish.com · 1 Oct 2026
Security framework: CanIPhish bases its policies, standards, procedures and guidelines on the NIST Cybersecurity Framework and the Australian Cyber Security Centre Information Security Manual.caniphish.com · 1 Oct 2026
Data residency: Customer data can be stored in configurable locations including Australia, the United States, the United Kingdom, Canada, South Africa, Germany, the United Arab Emirates, Brazil and Singapore.caniphish.com · 1 Oct 2026
Email delivery: Email delivery can use CanIPhish SMTP, Google Workspace Direct Email Injection, Microsoft 365 Direct Email Injection or a customer-controlled third-party SMTP server.help.caniphish.com · 1 Oct 2026
Usage limit: CanIPhish limits the unique email addresses that can be emailed according to the employee count in the subscription and refreshes those addresses monthly.caniphish.com · 1 Oct 2026
Customer profile: The platform is used by managed service providers, enterprise customers and organizations of all sizes across more than 65 countries.caniphish.com · 1 Oct 2026