---
title: Fallax Reviews
meta_title: 'Fallax Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter reviews by the users' company size, role or industry to find
  out how Fallax works for a business like yours.
date_modified: '2026-08-19'
parent_category:
  name: Vulnerability Management
  url: https://www.g2.com/categories/vulnerability-management
---


# Fallax Reviews
**Vendor:** Fallax  
**Category:** [Security Awareness Training Software](https://www.g2.com/categories/security-awareness-training)
## About Fallax
Fallax is a phishing simulation and security awareness platform for authorised internal security testing. It connects to your Microsoft 365 or Google Workspace tenant with one admin consent, syncs your people straight from the directory, and delivers simulated phishing emails by injecting them into staff mailboxes through your own tenant. There is no sending domain to configure, no SPF/DKIM/DMARC setup, and no risk to the deliverability of the domain your real business mail depends on. Once connected, a continuous programme gives every person their own schedule of simulations, sent at a random minute inside their own working hours so colleagues cannot warn each other. Cadence and difficulty adapt to how each person handled the last one: frequent clickers are tested more often on easier lures, consistent reporters get the hardest ones less often. A monthly cap, a minimum gap between sends and a pause that drops the whole queue keep it bounded. One-off campaigns still exist for tests you want to run by hand. Opens, clicks, credential submissions and reports are tracked per person. Submitted credential values are never stored, only that a submission occurred. Anyone who falls for a simulation lands on an awareness page showing them what to look for next time, and a report mailbox credits staff who forward suspicious mail without anyone ticking a box. Every simulation lands in a per-recipient audit trail that exports as CSV or PDF evidence for ISO 27001 A.6.3, SOC 2 CC1.4 and CC2.2, NIS2 Article 21(2)(g), DORA Article 13(6), PCI DSS 12.6.3.1, HIPAA 164.308(a)(5), GDPR Article 32 and NIST CSF PR.AT-01, or syncs itself into Vanta and Drata. Other features: - App discovery: asks your tenant which applications it federates and who signs in to them, then ranks the lure gallery so the phishing template borrows a brand your staff really use - Template and landing page gallery with merge tags, inbox-row and rendered previews, and per-template click rates - People and audiences: manual add, CSV import with column mapping, directory sync, bulk actions - Domain ownership verification (SSO, DNS TXT record, or mailbox connector) that fences in which addresses a campaign may target and which senders it may present - Multi-tenant workspaces with Google and Microsoft Entra SSO - Read-only MCP server so Claude, ChatGPT or any MCP client can query a workspace's reporting - Reporting: resilience trend, engagement funnel, risk by department, per-template effectiveness






- [View Fallax pricing details and edition comparison](https://www.g2.com/products/fallax/reviews?section=pricing&secure%5Bexpires_at%5D=2026-09-09+21%3A19%3A33+-0500&secure%5Bsession_id%5D=8b42a206-8119-462b-885a-221afd22ca54&secure%5Btoken%5D=8dc551438721db54d24c420ea7eabf1b52a00ab2f255bf69e76e733f07465e89&format=llm_user)

## Fallax Features
**Additional Functionality**
- Search/Filter
- Risk Management
- Generative AI
- Alerts/Notifications
- Compliance Management
- Third-Party Integrations
- Certificate Assessment
- API
- Incident Management
- Automated Containment
- Real-Time Data
- Vulnerability Scanning
- Monitoring
- Policy Management
- Asset Discovery
- Penetration Testing
- Runtime Container Security
- Activity Dashboard
- Security Auditing
- Issue Tracking
- Threat Intelligence
- Patch Management
- Endpoint Management
- Collaboration Tools
- Vulnerability Management
- Goal Setting/Tracking
- Vulnerability Assessment
- Asset Tagging
- Assessment Management
- Access Controls/Permissions
- AI Copilot
- Vulnerability/Threat Prioritization
- Vulnerability Protection
- Risk Assessment
- Reporting/Analytics
- SQL Injections

**Assessment**
- Continuous Assessment
- Phishing Assessment
- Baselining
- Risk Assessment

**Training**
- Content Library
- Interactive Training
- Gamification

**Administration**
- Risk-scoring
- Customization
- White-Labeling
- Reporting
- AI-generated Content
- Generative AI
- Interactive Content

**Additional Functionality**
- Reporting/Analytics
- Assessment Management
- Learning Management
- Document Automation
- Policy Management
- Dashboard
- Alerts/Notifications
- Training Management
- Simulated Threat Attacks
- Self-Paced Courses
- Data Visualization
- Risk Analysis
- Progress Tracking
- Threat Intelligence
- Third-Party Integrations
- Compliance Management
- Regulatory Compliance
- AI Copilot
- Surveys & Feedback
- Customizable Reports
- Compliance Tracking
- Interactive Learning
- Interactive Reports
- Goal Setting/Tracking
- Self-paced Learning

## Top Fallax Alternatives
  - [Hoxhunt](https://www.g2.com/products/hoxhunt/reviews) - 4.8/5.0 (3,717 reviews)
  - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews) - 4.6/5.0 (2,378 reviews)
  - [MetaCompliance Security Awareness Training](https://www.g2.com/products/metacompliance-security-awareness-training/reviews) - 4.6/5.0 (1,116 reviews)