PhishMan

What PhishMan does

Phishman (legal entity ООО «ФИШМАН», founded 2016) is a Moscow-based developer of a SaaS platform for cybersecurity awareness training, designed to raise employee "cyberculture" and reduce information-security incident rates in Russian enterprises. The platform is modular, combining a Phishing Module (constructor plus quarterly-updated Russian-language phishing templates and simulated landing pages), an Information Collection Module (native integration with Active Directory/LDAP, MaxPatrol SIEM, Kaspersky Security Center, and a universal API connector), a Training Module (proprietary LMS with branded/customizable content, plus integration with external LMS such as Websoft HCM, Mirapolis, Moodle, iSpring), and an Automation Module (rule- and scenario-driven training workflows). The product line is split between Phishman Enterprise (16 courses / 42-49 modules, advanced integration and customization, targeted at medium/large business) and Phishman Base (3 courses / 12-16 modules, ready-made scenarios for SMB), with specialized add-on courses for CII/KII compliance (187-FZ), personal data (152-FZ), secure development, and commercial secrets.

The company sells on a quote-based, per-seat annual licensing model, supplemented by professional services (customization, system management, prioritized support) and add-on specialized courses. Go-to-market is hybrid: direct enterprise sales with free one-month pilots as the entry point, plus a channel network of three major Russian IT distributors (MONT, Axoft, OCS Distribution) through whom the cloud edition is exclusively sold. Customers are predominantly large Russian enterprises across sectors including metals (RUSAL), telecom (MTS, MegaFon), petrochemicals (SIBUR, Gazprom Neft), aviation (Aeroflot), and real estate (Samolet), with KII operators as a dedicated vertical. Phishman has trained 350,000+ employees across 100+ implementations and claims a 70% reduction in security events and 25% reduction in IB-department workload within the first month of deployment.

Phishman is registered in the Russian Software Registry (entry No. 6076, November 19, 2019), is a Skolkovo participant, and is a resident of the Cyberdom cybersecurity cluster — credentials that position it as a compliant, import-substitution-aligned vendor for regulated Russian buyers. Revenue, headcount growth, and ARR are not publicly disclosed; the company's own investor or funding history (a $10M Moscow Seed Fund round in November 2016) is the only capital-formation signal in the source data.

Name

PhishMan

Legal name

ООО «ФИШМАН»

Website

https://phishman.ru

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

5,001–10,000 employees

Short description

Phishman is a Russian cybersecurity awareness training SaaS platform combining phishing simulation, LMS content, and rule-based automation, serving 100+ Russian enterprises across telecom, energy, metals, and aviation.

Ownership category

akta.pro rank

Product category

Security Awareness Training Software

NAICS

Software Publishers (5132), Computer Training (61142)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Security Awareness & Phishing Simulation (Email/Collab-focused) (HDADAKAJ)

Keywords

• Cybersecurity awareness training
• Phishing simulation platform
• Security training software
• Employee cyber education
• Phishing attack simulation

Headquarters

HQ city

Moscow

HQ country

Russia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Others

Revenue model

1. Software Licenses: Per-user licensing model. Licenses are competitive. Phishman Enterprise for medium and large businesses, Phishman Base for small and medium businesses. Customization and support services available as add-ons.
2. Professional Services: Customization services for course content, branding, glossary changes. System management/monitoring services. Technical support services with priority levels.
3. Specialized Courses: Additional specialized courses purchased as add-ons to main products: KII courses, personal data protection, secure development, commercial secrets.

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels6 records

Core offering

Phishman develops and sells a SaaS/on-premise platform for employee cybersecurity awareness training and phishing simulation. The platform combines a phishing attack constructor, an information collection module that integrates with enterprise systems, a training LMS, and an automation engine to test employees, build personalized learning plans, and reduce security incidents. Two editions are sold: Phishman Enterprise (for medium and large businesses) and Phishman Base (for small and medium businesses), with specialized add-on courses for Russian regulatory compliance (187-FZ, 152-FZ).

Product overview

Phishman is an automated knowledge management system for employee cybersecurity awareness, consisting of a core platform with modular components. The main product line includes two editions: Phishman Base (for small and medium businesses with 3 courses, 12 modules) and Phishman Enterprise (for medium and large businesses with 16 courses, 42 modules). Both editions include four core modules: Phishing Module (simulates phishing attacks), Information Collection Module (integrates with AD/LDAP/security systems), Training Module (LMS with cybersecurity courses), and Automation Module (automated learning workflows). The platform can be deployed on company servers or accessed via cloud through partners. Specialized add-on courses are available separately for CII security (187-FZ compliance), personal data protection (152-FZ compliance), secure development, and commercial secrets protection.

Differentiator

Problem solved

Functional benefit

Brands

• Phishman Базовый (Phishman Base): Basic edition with phishing module, information collection module, training module, and automation module. Includes 3 cybersecurity courses with 12 modules. Designed for small and medium businesses.
• Phishman Продвинутый (Phishman Enterprise)

Products and services

• Phishman Enterprise (Продвинутый) Advanced edition of the Phishman cybersecurity awareness platform designed for medium and large businesses. Includes 16 cybersecurity courses with 42 training modules, a phishing email and website constructor with quarterly template updates, information collection via Active Directory/LDAP/SQL and a universal API connector, integration with MaxPatrol SIEM, Kaspersky Security Center, and Russian LMS systems, a rule-based automation wizard, branded and customizable content, and extended technical support. Sold on a per-seat annual license.
• Phishman Base (Базовый) Basic edition of the Phishman cybersecurity awareness platform for small and medium businesses. Includes 3 cybersecurity courses with 12 modules, ready-made phishing email templates, manual or Active Directory-based user onboarding, pre-installed automation scenarios, and basic technical support. Sold on a per-seat annual license.
• Personal Data Protection Course Add-on specialized course covering what constitutes personal data, why it requires protection, and methods for protecting it. Designed to support compliance with Russian Federal Law 152-FZ on personal data, and sold as an add-on to Phishman Enterprise and Phishman Base.
• Critical Information Infrastructure (CII) Security Courses Add-on specialized courses on ensuring information security for objects of critical information infrastructure, covering oil and gas, energy, metallurgical, and transport industries. Designed to support compliance with Russian Federal Law 187-FZ and is sold as an add-on to the main Phishman platform.
• Secure Development Course Add-on specialized course covering secure software development including fundamentals, principles, DevSecOps methodologies and tools, and real case studies. Sold as an add-on to Phishman Enterprise and Phishman Base.
• Commercial Secrets Course Add-on specialized course covering what constitutes commercial secrets, how to protect them, and consequences of violations. Sold as an add-on to the main Phishman platform.

Quantifiable outcome

• 70% reduction in information security events in first month of use
• +3 more outcomes

Named customers8 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration11 records

Feature5 records

Partnerships

Five partnerships are on record, tiered core and flagship.

• МОНТ (MONT)coreChannel Partner/ Reseller/ DistributorOfficial distributor of Phishman products in Russia. Provides distribution, sales support, and cloud deployment options. Located in Moscow.
• Axoft (Аксофт)coreChannel Partner/ Reseller/ DistributorOfficial distributor of Phishman products. Provides software distribution and sales channel services for Phishman solutions.
• OCS Distribution (ООО О-Си-Эс-Центр)coreChannel Partner/ Reseller/ DistributorOfficial distributor of Phishman products. IT distribution company offering Phishman cybersecurity training solutions.
• SkolkovoflagshipStrategic or Co-development PartnerPhishman is a participant of the Skolkovo innovation project, providing access to R&D support and innovation ecosystem benefits.
• CyberdomcoreStrategic or Co-development PartnerPhishman is a resident of Cyberdom cybersecurity cluster, providing networking and collaboration opportunities within the cybersecurity industry.

Scale indicators8 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• KnowBe4: Global leader in security awareness training and phishing simulation. Directly comparable to Phishman as a SaaS platform combining simulated phishing, training content, and automation, though KnowBe4 operates at much larger scale internationally.
• Cofense: Specialist in phishing defense, combining phishing simulation with a human-reported email intelligence platform. Closely comparable in phishing simulation focus and mid-to-large enterprise go-to-market motion.

Broad incumbents

• Proofpoint Security Awareness: Broad cybersecurity incumbent offering a security awareness and phishing simulation suite as part of a larger email security and threat intelligence portfolio. Comparable product functionality for enterprise buyers with adjacent capabilities.
• Sophos Phish Threat: Security awareness/phishing simulation offering bundled within Sophos's broader endpoint and network security suite. Comparable phishing simulation and training content functionality, sold as part of a wider incumbent platform.
• Barracuda PhishLine: Email security incumbent offering PhishLine for phishing simulation and training. Comparable as a phishing awareness platform, typically bundled with Barracuda's email protection suite for SMB and mid-market.
• Mimecast: Email and collaboration security vendor with awareness training content for end users. Comparable in combining email security with human-risk reduction, though primarily for larger enterprises with email-centric deployments.

Regional players

• Kaspersky Security Awareness: Russian-founded global cybersecurity vendor offering security awareness training products with strong CIS distribution. Directly comparable product functionality and shares the Russian enterprise buyer base with Phishman.
• InfoWatch: Russian cybersecurity vendor covering data loss prevention and security awareness. Comparable in serving Russian enterprises with indigenous software status, and overlapping in the awareness training niche.
• Security Vision: Russian information security vendor offering an integrated platform that includes security awareness training. Comparable to Phishman in serving Russian KII and regulated enterprises with indigenous software positioning.
• BI.ZONE: Russian cybersecurity services and product vendor that includes security awareness training in its portfolio. Comparable in targeting Russian enterprises with bundled security offerings.

Market position

Strengths1 record

Weaknesses1 record

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/Phishman.ru

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles11 records

Funding overview

Funding rounds2 records

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about PhishMan