PhishMan
Phishman is a Russian cybersecurity awareness training SaaS platform combining phishing simulation, LMS content, and rule-based automation, serving 100+ Russian enterprises across telecom, energy, metals, and aviation.
- Company typePrivate
- Founded2016
- HeadquartersMoscow, Russia
- Headcount5,001–10,000
- GTM typeB2B
- OfferingSoftware
What PhishMan does
Phishman (legal entity ООО «ФИШМАН», founded 2016) is a Moscow-based developer of a SaaS platform for cybersecurity awareness training, designed to raise employee "cyberculture" and reduce information-security incident rates in Russian enterprises. The platform is modular, combining a Phishing Module (constructor plus quarterly-updated Russian-language phishing templates and simulated landing pages), an Information Collection Module (native integration with Active Directory/LDAP, MaxPatrol SIEM, Kaspersky Security Center, and a universal API connector), a Training Module (proprietary LMS with branded/customizable content, plus integration with external LMS such as Websoft HCM, Mirapolis, Moodle, iSpring), and an Automation Module (rule- and scenario-driven training workflows). The product line is split between Phishman Enterprise (16 courses / 42-49 modules, advanced integration and customization, targeted at medium/large business) and Phishman Base (3 courses / 12-16 modules, ready-made scenarios for SMB), with specialized add-on courses for CII/KII compliance (187-FZ), personal data (152-FZ), secure development, and commercial secrets.
The company sells on a quote-based, per-seat annual licensing model, supplemented by professional services (customization, system management, prioritized support) and add-on specialized courses. Go-to-market is hybrid: direct enterprise sales with free one-month pilots as the entry point, plus a channel network of three major Russian IT distributors (MONT, Axoft, OCS Distribution) through whom the cloud edition is exclusively sold. Customers are predominantly large Russian enterprises across sectors including metals (RUSAL), telecom (MTS, MegaFon), petrochemicals (SIBUR, Gazprom Neft), aviation (Aeroflot), and real estate (Samolet), with KII operators as a dedicated vertical. Phishman has trained 350,000+ employees across 100+ implementations and claims a 70% reduction in security events and 25% reduction in IB-department workload within the first month of deployment.
Phishman is registered in the Russian Software Registry (entry No. 6076, November 19, 2019), is a Skolkovo participant, and is a resident of the Cyberdom cybersecurity cluster — credentials that position it as a compliant, import-substitution-aligned vendor for regulated Russian buyers. Revenue, headcount growth, and ARR are not publicly disclosed; the company's own investor or funding history (a $10M Moscow Seed Fund round in November 2016) is the only capital-formation signal in the source data.
PhishMan firmographics
Firmographics- Name
- PhishMan
- Legal name
- ООО «ФИШМАН»
- Website
- https://phishman.ru
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 5,001–10,000 employees
- Short description
- Phishman is a Russian cybersecurity awareness training SaaS platform combining phishing simulation, LMS content, and rule-based automation, serving 100+ Russian enterprises across telecom, energy, metals, and aviation.
- Ownership category
- akta.pro rank
PhishMan industry classification
Industry- Product category
- Security Awareness Training Software
- NAICS
- Software Publishers (5132), Computer Training (61142)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Security Awareness & Phishing Simulation (Email/Collab-focused) (HDADAKAJ)
Keywords
Where PhishMan is headquartered
LocationHeadquarters
- HQ city
- Moscow
- HQ country
- Russia
- HQ region
- Europe
Offices1 record
Markets served
PhishMan business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Others
Revenue model
- Software Licenses: Per-user licensing model. Licenses are competitive. Phishman Enterprise for medium and large businesses, Phishman Base for small and medium businesses. Customization and support services available as add-ons.
- Professional Services: Customization services for course content, branding, glossary changes. System management/monitoring services. Technical support services with priority levels.
- Specialized Courses: Additional specialized courses purchased as add-ons to main products: KII courses, personal data protection, secure development, commercial secrets.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Per seat | Annual | Phishman Enterprise - Advanced edition for medium and large business |
| Per seat | Annual | Phishman Base - Basic edition for small and medium business |
| Per seat | Annual | Specialized Courses - Add-on modules |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels6 records
PhishMan product offering
Product offeringCore offering
Phishman develops and sells a SaaS/on-premise platform for employee cybersecurity awareness training and phishing simulation. The platform combines a phishing attack constructor, an information collection module that integrates with enterprise systems, a training LMS, and an automation engine to test employees, build personalized learning plans, and reduce security incidents. Two editions are sold: Phishman Enterprise (for medium and large businesses) and Phishman Base (for small and medium businesses), with specialized add-on courses for Russian regulatory compliance (187-FZ, 152-FZ).
Product overview
Phishman is an automated knowledge management system for employee cybersecurity awareness, consisting of a core platform with modular components. The main product line includes two editions: Phishman Base (for small and medium businesses with 3 courses, 12 modules) and Phishman Enterprise (for medium and large businesses with 16 courses, 42 modules). Both editions include four core modules: Phishing Module (simulates phishing attacks), Information Collection Module (integrates with AD/LDAP/security systems), Training Module (LMS with cybersecurity courses), and Automation Module (automated learning workflows). The platform can be deployed on company servers or accessed via cloud through partners. Specialized add-on courses are available separately for CII security (187-FZ compliance), personal data protection (152-FZ compliance), secure development, and commercial secrets protection.
Differentiator
Problem solved
Functional benefit
Brands
- Phishman Базовый (Phishman Base): Basic edition with phishing module, information collection module, training module, and automation module. Includes 3 cybersecurity courses with 12 modules. Designed for small and medium businesses.
- Phishman Продвинутый (Phishman Enterprise)
Products and services
- Phishman Enterprise (Продвинутый) Advanced edition of the Phishman cybersecurity awareness platform designed for medium and large businesses. Includes 16 cybersecurity courses with 42 training modules, a phishing email and website constructor with quarterly template updates, information collection via Active Directory/LDAP/SQL and a universal API connector, integration with MaxPatrol SIEM, Kaspersky Security Center, and Russian LMS systems, a rule-based automation wizard, branded and customizable content, and extended technical support. Sold on a per-seat annual license.
- Phishman Base (Базовый) Basic edition of the Phishman cybersecurity awareness platform for small and medium businesses. Includes 3 cybersecurity courses with 12 modules, ready-made phishing email templates, manual or Active Directory-based user onboarding, pre-installed automation scenarios, and basic technical support. Sold on a per-seat annual license.
- Personal Data Protection Course Add-on specialized course covering what constitutes personal data, why it requires protection, and methods for protecting it. Designed to support compliance with Russian Federal Law 152-FZ on personal data, and sold as an add-on to Phishman Enterprise and Phishman Base.
- Critical Information Infrastructure (CII) Security Courses Add-on specialized courses on ensuring information security for objects of critical information infrastructure, covering oil and gas, energy, metallurgical, and transport industries. Designed to support compliance with Russian Federal Law 187-FZ and is sold as an add-on to the main Phishman platform.
- Secure Development Course Add-on specialized course covering secure software development including fundamentals, principles, DevSecOps methodologies and tools, and real case studies. Sold as an add-on to Phishman Enterprise and Phishman Base.
- Commercial Secrets Course Add-on specialized course covering what constitutes commercial secrets, how to protect them, and consequences of violations. Sold as an add-on to the main Phishman platform.
Quantifiable outcome
- 70% reduction in information security events in first month of use
- +3 more outcomes
Companies that use PhishMan
Customer profileNamed customers8 records
Segments4 records
Ideal customer profiles3 records
PhishMan technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
Feature5 records
PhishMan partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core and flagship.
- МОНТ (MONT)coreOfficial distributor of Phishman products in Russia. Provides distribution, sales support, and cloud deployment options. Located in Moscow.
- Axoft (Аксофт)coreOfficial distributor of Phishman products. Provides software distribution and sales channel services for Phishman solutions.
- OCS Distribution (ООО О-Си-Эс-Центр)coreOfficial distributor of Phishman products. IT distribution company offering Phishman cybersecurity training solutions.
- SkolkovoflagshipPhishman is a participant of the Skolkovo innovation project, providing access to R&D support and innovation ecosystem benefits.
- CyberdomcorePhishman is a resident of Cyberdom cybersecurity cluster, providing networking and collaboration opportunities within the cybersecurity industry.
Scale indicators8 records
Recent moves6 records
Expansion highlights5 records
PhishMan competitors and assessment
Company assessmentDirect peers
- KnowBe4: Global leader in security awareness training and phishing simulation. Directly comparable to Phishman as a SaaS platform combining simulated phishing, training content, and automation, though KnowBe4 operates at much larger scale internationally.
- Cofense: Specialist in phishing defense, combining phishing simulation with a human-reported email intelligence platform. Closely comparable in phishing simulation focus and mid-to-large enterprise go-to-market motion.
Broad incumbents
- Proofpoint Security Awareness: Broad cybersecurity incumbent offering a security awareness and phishing simulation suite as part of a larger email security and threat intelligence portfolio. Comparable product functionality for enterprise buyers with adjacent capabilities.
- Sophos Phish Threat: Security awareness/phishing simulation offering bundled within Sophos's broader endpoint and network security suite. Comparable phishing simulation and training content functionality, sold as part of a wider incumbent platform.
- Barracuda PhishLine: Email security incumbent offering PhishLine for phishing simulation and training. Comparable as a phishing awareness platform, typically bundled with Barracuda's email protection suite for SMB and mid-market.
- Mimecast: Email and collaboration security vendor with awareness training content for end users. Comparable in combining email security with human-risk reduction, though primarily for larger enterprises with email-centric deployments.
Regional players
- Kaspersky Security Awareness: Russian-founded global cybersecurity vendor offering security awareness training products with strong CIS distribution. Directly comparable product functionality and shares the Russian enterprise buyer base with Phishman.
- InfoWatch: Russian cybersecurity vendor covering data loss prevention and security awareness. Comparable in serving Russian enterprises with indigenous software status, and overlapping in the awareness training niche.
- Security Vision: Russian information security vendor offering an integrated platform that includes security awareness training. Comparable to Phishman in serving Russian KII and regulated enterprises with indigenous software positioning.
- BI.ZONE: Russian cybersecurity services and product vendor that includes security awareness training in its portfolio. Comparable in targeting Russian enterprises with bundled security offerings.
Market position
Strengths1 record
Weaknesses1 record
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
PhishMan social profiles
Digital presencePhishMan compliance and trust
Trust signalCompliance1 record
PhishMan financial estimates
Financial estimateRevenue estimate
Valuation estimate
PhishMan leadership team
Management profileNumber of profiles
Profiles11 records
PhishMan funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
PhishMan M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about PhishMan
What does PhishMan do?
Phishman develops and sells a SaaS/on-premise platform for employee cybersecurity awareness training and phishing simulation. The platform combines a phishing attack constructor, an information collection module that integrates with enterprise systems, a training LMS, and an automation engine to test employees, build personalized learning plans, and reduce security incidents. Two editions are sold: Phishman Enterprise (for medium and large businesses) and Phishman Base (for small and medium businesses), with specialized add-on courses for Russian regulatory compliance (187-FZ, 152-FZ).
Is PhishMan a public or private company?
PhishMan is a private company. It is classified as venture growth investor backed and is currently operating.
When was PhishMan founded?
PhishMan was founded in 2016. It employs 5,001 to 10,000 people.
Where is PhishMan based?
PhishMan is headquartered in Moscow, Russia, in the Europe region.
How does PhishMan make money?
Three revenue lines are on record. Software Licenses are the primary driver. The others are professional Services and specialized Courses.
Who are PhishMan's main competitors?
Direct peers on record are KnowBe4 and Cofense. Broad incumbents are Proofpoint Security Awareness, Sophos Phish Threat, Barracuda PhishLine and Mimecast. Regional players are Kaspersky Security Awareness, InfoWatch, Security Vision and BI.ZONE.
Does PhishMan have an API?
No public API is recorded for PhishMan.
What industry is PhishMan in?
PhishMan's product category is Security Awareness Training Software. Its primary akta.pro industry code is HDADAKAJ, Security Awareness & Phishing Simulation (Email/Collab-focused). Its NAICS code is 5132 and its SIC code is 7371.