Sophos Phish Threat.
Turn your weakest link into a human firewall.
Sophos Phish Threat lets you run realistic phishing
simulations, then drops the users who click straight into short, on-the-spot training. It runs entirely in
Sophos Central, licenses per user, and gives you the reporting to prove your risk is going down. Pick the
user band and term that fit your team below.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day License DeliveryKeys sent fast, straight to you.
Specifications
Phish Threat at a Glance
Realistic Simulations
Launch hundreds of real-world attack templates in a few clicks, from beginner lures to advanced
spear-phishing. Test phishing, credential harvesting, and malicious attachments, with templates that
track the tactics attackers are using right now.
On-the-Spot Training
Anyone who clicks a simulated phish gets auto-enrolled in a short training module while the lesson is
fresh. The library covers more than 30 security and compliance topics and runs in nine languages, so
training fits the way your team actually works.
Reporting & Awareness
A single dashboard shows who clicked, who reported, and how your risk is trending across the whole
organization. The Outlook add-in for PC and Mac gives users one button to report suspicious mail, so you
measure real behavior at the inbox.
Licensing & Deployment
One simple license type, priced per user with unlimited tests, in bands from 1 to 5,000-plus.
Everything runs in Sophos Central with no hardware to install, and Synchronized Security ties Phish
Threat to Sophos Email to target your riskiest users.
Not sure Phish Threat is the whole answer?
Phish Threat trains your people. Sophos Email blocks the malicious mail that reaches them, and now
bundles Phish Threat in. See how the two work together in Sophos Central and build a plan that covers both
the inbox and the human behind it.
Phish Threat is licensed per user. You need enough licenses to cover every unique
person who receives a campaign email during the license term, whether it is a simulation or a
training-only send. One user counts once no matter how many campaigns they get. So if you plan to run
campaigns for about 40 people, you would land in the 25 to 49 user band. Not sure which band fits?
Tell us your headcount and we'll size it for you.
No. Phish Threat is a standalone Sophos Central service that runs entirely in your
browser. There is no hardware to buy and no appliance to configure. You just need a Sophos Central
account, which is free to create, and then you import or sync your users and start sending campaigns.
If you already run a Sophos firewall or endpoint, Phish Threat simply shows up alongside them in the
same console.
They solve two different halves of the same problem. Email security, like Sophos
Email or a firewall's anti-spam, blocks malicious and spoofed messages before they hit the inbox.
Phish Threat works on the human layer: it trains people to spot the messages that slip through. You
want both. As of late 2025, Sophos Email now includes Phish Threat, and Synchronized Security can
enroll users who were warned or blocked into targeted training automatically.
You manage users inside Sophos Central, and your license just needs to cover every
unique person who gets a campaign email during the term. If your headcount grows past your current
band, you add licenses to cover the new users. If you need to add seats mid-term or true up before
renewal, reach out and we'll get the right licenses added to your account.
Phish Threat includes an Outlook add-in for PC and Mac that gives every user a single
button to report suspicious mail. When they report a simulation, they get instant positive feedback;
when they report a real threat, it routes to the right place for your team to act on. Either way you
gain visibility into how people behave at the inbox, which is the number that actually matters.
Yes. Both the attack templates and the training modules are available in nine
languages, so you can run a program that matches the languages your team actually works in. SophosLabs
keeps the template library current with the phishing tactics showing up in the wild, and users who
click get enrolled in a matching module from a library of more than 30 security and compliance topics.
Build your human firewall with a Sophos Platinum Partner
Firewalls.com is a Sophos Platinum Partner, so you get certified guidance on sizing your user bands,
standing up campaigns, and tying Phish Threat into the rest of your Sophos stack. Tell us your headcount
and we'll quote the right license fast.
