Goldphish Reviews & Product Details

It’s simple and intuitive to use, and the cartoon-style graphics make the training engaging rather than a chore. Review collected by and hosted on G2.com.

My main frustration is that phishing simulations are limited to email. There’s no SMS or voice phishing, for example. There’s also no credential capture, so you can see who clicked a link but not who would have entered their username and password. That’s the biggest thing missing for me right now Review collected by and hosted on G2.com.

Goldphish is very simple to use and administer as a small business owner. The smaller, bite-size training makes it manageable for employees to actually complete. I love the scheduling feature as well. I was able to set up a year's worth of training all at the beginning. The pricing is very reasonable compared to other products for a small business. The training bites have an edge of humor, which makes the serious subject matter more interesting and engaging. Review collected by and hosted on G2.com.

I would like some more frequent reminders of some sort for my employees that should they run across something that appears to be spam, rather than just delete it, they should forward it to the GoldPhish reporter. Review collected by and hosted on G2.com.

They are easy to implement and manage, making them well suited to a small-to-medium organisation that does not need the complexity of running a full security awareness programme. Their training feature also allows for a one-time setup that runs throughout the year, reducing ongoing administration and freeing up time for other priorities. Review collected by and hosted on G2.com.

Limited phishing configuration: Domains cannot be selected to align with the chosen phishing template, reducing realism.

Unnecessary setup fields: The required “description” field adds little value when configuring a phishing simulation.

Remedial training visibility: Remedial training is tracked separately from general employee training. It would be more effective for all assigned training to appear in one dashboard.

Limited user grouping: Users cannot be easily assigned to different groups based on simulation criteria or target audience.

Training relevance: Training cannot be selected specifically to match the phishing scenario being simulated.

Limited notification cadence: There is no flexible option to configure recurring reminders and escalations, such as notifying managers when direct reports have outstanding training, miss deadlines, or require escalation. Review collected by and hosted on G2.com.

GoldPhish is very easy to use, particularly from an administrator’s perspective. Setting up the platform and campaigns is straightforward, with plenty of guidance materials and videos available to help with onboarding. The platform also offers a good level of customisation, including email templates and company branding.

Creating phishing campaigns is simple and does not require specialised knowledge, which means anyone managing the platform can set them up easily.

The training content is another strong point. There is a wide variety of interactive modules covering relevant security topics, with a mix of quizzes, videos and short micro-learning modules. Our team finds the training engaging, and several people have commented that they prefer it to training platforms they have used in the past. Review collected by and hosted on G2.com.

One area that could be improved would be the ability to add or remove users from scheduled or ongoing training campaigns. It would also be great to see GoldPhish develop a native MFA solution in the future. Review collected by and hosted on G2.com.

Their attractive interface with the boring topics that are transformed to very interesting fabulous and enjoyable training. Also cheap subscription for valuable content. Review collected by and hosted on G2.com.

nothing I recall. everything seemed flawless Review collected by and hosted on G2.com.

The user interface is super easy to navigate and their instructions and help guides makes it easy to learn as well. When running the phishing campaigns, the interactions between the employee receiving the phishing email and clicking/reporting the phishing email is so fast and speedy, we can see in live action how the users do in their tests and whether they clicked on the phishing links we have setup or whether they have reported the emails.

With everything the app provides from training videos, manuals as well as quizzes, phishing campaigns so we can test our clients employees in a safe way, the super fast response from the response team, and all the integration, it is definitely the money worth! Review collected by and hosted on G2.com.

At the moment, there is only one name we can setup as a sender when we create a new phishing campaign. We always enter "Support", but when we have multiple phishing links and campaigns, it would be nice to have multiple options as senders when it is sent out at random Review collected by and hosted on G2.com.

I love the Goldphish interface and find it very easy to set up. The way the reporting is structured makes it easy to understand, which is great. It's also easy for learners to navigate across the various available campaigns. The metrics provided after phishing or security awareness training campaigns are completed help track progress and make improvements on a quarter-to-quarter basis. Review collected by and hosted on G2.com.

I would love to see some API integrations available within Goldphish. So that I can export those metrics directly into other projects or other software tools like Avaza, Microsoft Project, Claude Code, etc Review collected by and hosted on G2.com.

I like that Goldphish is very easy to use, and the tests and information are easy to understand. These features make it valuable because they allow my staff to feel part of the cybersecurity system and have a role in protecting our intellectual property. Review collected by and hosted on G2.com.

Perhaps the follow-up if a user mistakenly clicks on a link that they shouldn't during the testing process. Maybe better training and a way for me as the admin to be notified of that. Review collected by and hosted on G2.com.

The ease of access and ability to set things up very quickly. Helped our timeline for deployment out a ton. Review collected by and hosted on G2.com.

There are some small features missing such as not allowing us to add people to an ongoing training. Review collected by and hosted on G2.com.

Integrating with the newer version of the system was a great decision, and it has made managing the system across multiple companies much easier. Customer support is excellent. Review collected by and hosted on G2.com.

I don’t have any issues at this time, and I’m enjoying using the new platform. Review collected by and hosted on G2.com.