Gophish is a powerful, open-source phishing framework that makes it easy to test your organization's exposure to phishing.
For free.
Gophish makes it easy to create or import pixel-perfect phishing templates.
Our web UI includes a full HTML editor, making it easy to customize your templates right in your browser.
Launch the campaign and phishing emails are sent in the background. You can also schedule campaigns to launch whenever you'd like.
Detailed results are delivered in near real-time. Results can be exported for use in reports.
Gophish can be installed with a single download. Get up and running in seconds.
Gophish is powered by a REST API. Our Python client makes working with the API a breeze.
Gophish has a gorgeous web interface. Import existing websites and emails, enable email open tracking, and more with a single click.
Gophish binaries are provided for most platforms, including Windows, Mac OSX, and Linux.
Gophish updates results automatically. Using the UI, you can view a timeline for each recipient, tracking email opens, link clicks, submitted credentials, and more.
Everything in Gophish is designed to "just work". It's so easy to setup, easy to use, and quick to give powerful results that you'll think it's magic.