- Business Email Compromise
- Compliance
- Cybersecurity
- Endpoint Protection Platform
- ISO/IEC 27001
- Multifactor Authentication
- Phishing
- Protection
Show all 14 topics
No article in the knowledge graph for Boxphish yet.
Who is Boxphish?
Boxphish is a private company that provides security awareness training and simulated phishing assessments designed to help organizations reduce human-driven email and social engineering risk.
- Simulated phishing campaigns that measure employee susceptibility to social engineering
- Security awareness training modules delivered through web-based learning workflows
- Reporting and analytics on user interaction and training completion
- Targeted remediation training assigned according to simulation outcomes
- Positioned in the cybersecurity education and workforce training category
Show more
More About Boxphish
Boxphish offers its solutions to enterprises and other organizations that maintain formal security awareness programs. In these environments, security, human resources, and compliance teams typically use simulated phishing exercises and training content to assess how users respond to deceptive messages and to build consistent security habits across the workforce. Campaigns in this solution category generally deliver controlled test messages to user mailboxes, record interactions such as link clicks or credential submission, and route participants to relevant coursework.
The solution category is usually delivered as a software-as-a-service platform. Integration with email systems and identity or directory services commonly occurs through standard interfaces and directory synchronization, which allows administrators to manage user groups, schedules, and reporting centrally. Training content is typically organized into modules that address topics such as credential protection, malicious attachments, business email compromise, and data handling. Programs of this type are often mapped to internal policy requirements and to personnel security controls referenced in widely used frameworks, including ISO/IEC 27001 and guidance published by the National Institute of Standards and Technology.
Security awareness training and phishing simulation are generally considered complementary to technical controls such as secure email gateways, endpoint protection, and multifactor authentication. Other providers in this category offer similar capabilities, and differences among them commonly relate to content libraries, campaign customization, reporting depth, and administrative integration. Because phishing remains a common initial vector in reported security incidents, organizations often use measured user performance over time to inform training priorities and policy decisions.
Within the Decision Insights directory, Boxphish is positioned in the consumer services and education services segment of the Consumer Discretionary sector, reflecting its training and instructional offerings. Its active solution areas center on security awareness training and phishing simulation for organizational audiences.
Our description of Boxphish. Updated October 2026.
