HailBytes SAT - Enterprise Phishing Simulation Platform

My main use case for Gophish  is for penetration testing on cybersecurity with phishing links and others. We used Gophish  to test the mindset of different users in the company. We used Gophish to send intrusion links and links by email, for example, links supposedly from sites they visit or related to their Facebook or Instagram account.

We determined the number of people who clicked on the link, those who reported it before clicking on the link, and those who did not click on the link. It was a survey campaign that we conducted after an awareness session that we carried out with the different users of the company.

The best features offered by Gophish stand out to me as most valuable because we can design virtual sites for intrusions, especially with cybercrime testing with phishing awareness. We have a backlog where we can monitor the number of links clicked and the number of links not clicked.

These elements are useful to me with Gophish because we actually understand the mindset of users after the awareness session, whether they have already absorbed the advice that was given to them. Through the phishing and penetration testing we conducted, Gophish has had a major positive impact on my organization, especially in my department, because we were able to find out whether the different users already understood the concept of phishing.

For the moment, I have nothing to suggest about Gophish; the application works very well and it offers many features. As you progress, you discover more and more options. I chose a rating of eight because there are always options to add and there are always upgrades that will be made.

I have been using Gophish for a month.

One piece of advice I give to those who need to use Gophish is to be patient and read extensively. If necessary, even follow user manuals to better grasp Gophish's functionality.

Gophish is a good structure and a good technological innovation that deserves to be studied and much better known by the world because not everyone knows Gophish. Gophish is good and the structure is solid. I gave this product a rating of eight out of ten.

I have been using Gophish  for a year. My main use case for Gophish  is awareness campaigns for staff. A specific example of how I use Gophish in a campaign for staff is that I create fake internal-use pages and send them to collaborators' emails to see if they fall for the tests.

The best features that Gophish offers are that it has an easy-to-use platform and that it also has documentation to guide you through the implementation.

The ease of use and the documentation have helped me in my daily work with Gophish because, having zero experience with this platform, by looking up the documentation and having an easy-to-use interface, it was much easier for me to learn and implement it in the organization.

Gophish has positively impacted my organization by finding security gaps among our collaborators, and we found people who did not know or did not understand security. This platform helped us to be able to train collaborators about phishing after the tests.

I think that Gophish could be improved, but currently, all the functionalities it has and all the types of platforms that can be implemented are very interesting. For my part, I would not see any improvement. I would like to add nothing else about possible improvements, even if they are minor details or suggestions for the future.

I have been working in my current field for two years.

I consider Gophish to be stable.

I consider the scalability of Gophish interesting; it is a platform on which you can increase the number of staff and the number of platforms to run tests on, as well as the number of independent tests I can perform.

I have not needed customer support for Gophish so far.

I did not use any other solution before implementing Gophish; it was the first time it was implemented, so this platform was used.

Before choosing Gophish, I did not evaluate other options; it was an idea that came up after finding this platform.

I have seen a return on investment with Gophish, as indicated by the savings in implementation time and the responses we had to measure the awareness of the collaborators.

My experience with the price, implementation cost, and licensing of Gophish is that personally, I have used the open platform, so we have not had to pay anything yet.

My advice to other professionals who are considering using Gophish is that it is a platform for people who are just starting out and do not have the resources and also do not have knowledge. It is an excellent platform to start with and learn about the world of awareness campaigns for collaborators. It is an easy-to-use, stable platform; it can be set up on different platforms, whether Windows or Linux, and it is easy to use since it has an integrated interface that is very easy to use and it has no cost. Gophish would be an interesting platform to start testing awareness platforms for phishing campaigns. I would give this platform a rating of 10.

I use Gophish  to run fake awareness campaigns with our clients. Everything is framed and I use the product to send emails, get reporting, and then present the results afterward.

The objective of the campaign I carried out with Gophish  was to determine the level of maturity of employees and staff. So the goal is to send an email to everyone and see the percentage of people who fall into the trap.

We analyze the results of these campaigns by going back with the same data but for different companies to see whether the alerts are being followed.

The best features that Gophish offers include importing an Excel CSV file to import all the users and creating a web page directly from the feature in the product.

Importing users was made much easier for me with Gophish, and the same applies for web pages, as it was very convenient.

Gophish has had a positive impact on my organization because it is open source, so it is free. The product is easy to get started with, and likewise the campaigns are very quick to prepare.

The time savings I noticed thanks to Gophish are exceptional. You can create templates.

I think Gophish could be improved with a user-level function, meaning if the person is strong or weak, we send more or fewer awareness emails, and rely on real attacks in order to be able to create a template by itself.

I have covered everything regarding the necessary improvements or points that could make Gophish even more effective in my view.

It has been six years since I began working in my current field.

I would say Gophish is stable based on the only campaigns I have been able to run a few months ago.

In my context, Gophish is scalable enough to handle an increasing number of users or campaigns because I have not had any slowdown when adding user groups.

There is no support for Gophish because it is open source, so I have not needed to contact assistance or technical support for this tool.

We have no contact with Gophish aside from being a customer.

I was not using another product before Gophish.

I have noted time savings in the preparation of campaigns since I started using Gophish.

I did not evaluate any competing solution because Gophish was the product that was already there when I arrived.

The time savings I noticed thanks to Gophish are exceptional.

I find Gophish advantageous since it is open source, so there is no price or installation costs.

I did not evaluate any competing solution because Gophish was the product that was already there when I arrived.

I do not know what advice to give to a company that is considering using Gophish regarding points to watch out for or anticipate. My overall rating for this product is 8 out of 10.

My main use case for Gophish  is sending phishing emails. The main benefit of using Gophish  in phishing campaigns is the monitoring panel because sending emails by other methods already exists through other tools. The ease of configuration and the visual feedback in the tool is what makes me want to use Gophish.

In my opinion, the best features that Gophish offers are the customized dashboard.

The customized dashboard makes my work easier and brings benefits to the monitoring of campaigns because quick access and the information laid out in a user-friendly way allow me to monitor all campaigns in a single place.

Gophish has had a positive impact on my organization by using a tool that has an open-source version. We can start phishing campaigns that until a short time ago were not carried out. In addition, it is a tool with good features and a good dashboard but free, so it got everyone here excited.

I notice it in the team; people are a little more excited to configure, parameterize, and send new campaigns from within Gophish.

I believe that Gophish can be improved by increasing the number of possible integrations. However, the main point would be to make Gophish modular in relation to the campaigns that are carried out in order to allow it to be used not only in pentests or phishing pentests but also in Red Team Operations. For that, there is a need to make it more targeted and to configure stealth features.

I have been using Gophish for around six months.

Gophish is stable.

I cannot answer that question with certainty because I have not had the need to scale.

At my current company, I do not use another solution.

Gophish is deployed in my organization on a local server.

My experience with pricing, setup costs, and licensing is very pleasant as I have only tested the open-source version.

I did not evaluate others before choosing Gophish because I had already taken a course on Gophish and I liked the tool, so I went straight to it.

I would say not to think twice and to use Gophish; it is a good tool with excellent features and a good dashboard, so there is no reason to keep looking elsewhere. I would rate this product 8 out of 10.