GoldPhish
GoldPhish is a UK-based SaaS cybersecurity awareness training platform that delivers bite-sized micro-learning, phishing simulations, and email threat reporting to SMBs, distributed via MSPs, MSSPs, and cyber insurance partners across 25+ countries.
- Company typePrivate
- Founded2016
- HeadquartersLondon, United Kingdom
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What GoldPhish does
GoldPhish (legal entity: Goldphish Ltd.) is a London-based SaaS provider of cybersecurity awareness training, targeting primarily small and mid-sized businesses (SMBs) that lack dedicated in-house security teams. Founded in 2016 by Dan Thornton — a former UK Royal Marine Commando with corporate security risk-management experience — and co-founder Zoe Gardner, the company was built in direct response to the founders' view that traditional security training was dull, compliance-driven, and failed to change employee behaviour. The platform combines bite-sized micro-learning modules (typically 2–3 minutes) covering phishing, ransomware, passwords, MFA, and social engineering, with a realistic phishing simulation engine, a one-click Phish Reporter email-reporting tool integrated with Microsoft and Google environments, SSO support, policy management, and an annual communications calendar for sustained awareness programmes.
The business operates a tiered subscription model (Goldphish Premium, Goldphish Managed, Goldphish Content) with annual or multi-year contracts priced on organisational size, complemented by a free 30-day self-serve trial offering unlimited licences, training, and simulated phishing to drive product-led adoption. Distribution is channel-first rather than direct-sales-led: Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) embed the platform into broader security offerings with white-label support, while a strategic partnership with Munich Re positions GoldPhish as a human-risk-mitigation tool for cyber insurance policyholders. The company claims more than 3 million learners trained cumulatively across 25+ countries, almost entirely through this partner channel. G2 recognised GoldPhish in 2026 with EMEA regional Best Estimated ROI awards in both the Small Business and Mid-Market categories, supporting its cost-effective positioning against enterprise-focused competitors.
GoldPhish firmographics
Firmographics- Name
- GoldPhish
- Legal name
- Goldphish Ltd.
- Website
- https://goldphish.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- GoldPhish is a UK-based SaaS cybersecurity awareness training platform that delivers bite-sized micro-learning, phishing simulations, and email threat reporting to SMBs, distributed via MSPs, MSSPs, and cyber insurance partners across 25+ countries.
- Ownership category
- akta.pro rank
GoldPhish industry classification
Industry- Product category
- Security Awareness Training Software
- NAICS
- Computer Training (611420), Business Schools and Computer and Management Training (6114)
- SIC
- Services-Educational Services (8200)
- akta.pro primary industry
- Security Awareness & Phishing Simulation (Email/Collab-focused) (HDADAKAJ)
- akta.pro secondary industries
- Cybersecurity Training & Awareness Programs (BPAEANAF), Endpoint, Email & Web Safe-Use Practices Training (EDABAGAF), Fraud Prevention & Identity Theft / Account Takeover Awareness (EDABAGAO)
Keywords
Where GoldPhish is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Offices1 record
Markets served
GoldPhish business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Subscription Licensing: Annual or multi-year subscription model with tiered plans (Goldphish Premium, Managed, Content). Pricing based on organisational size with unlimited licences available.
- Partner/Channel Revenue: MSP and MSSP partners embed GoldPhish into their managed security offerings, distributing to their customer bases. Partners leverage the platform for managed training services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Free 30-day trial tier |
| Subscription | Annual | Goldphish Premium |
| Subscription | Annual | Goldphish Managed |
| Subscription | Annual | Goldphish Content |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels6 records
GoldPhish product offering
Product offeringCore offering
GoldPhish provides a SaaS security awareness training platform that combines bite-sized micro-learning training modules with realistic phishing simulation campaigns and a one-click email threat reporting tool. The platform is built specifically for small and mid-sized organisations that lack dedicated security teams, offering unlimited training campaigns, phishing simulations, reporting dashboards, SSO, and white-labelled deployment options for MSP/MSSP partners.
Product overview
GoldPhish is a unified SaaS security awareness training platform combining two core products—Security Awareness Training and Simulated Phishing—alongside supporting features like Phish Reporter, configurable campaign tools, and a rich content library. The platform operates on a platform-plus-solution architecture with three named solution tiers (Goldphish Premium, Goldphish Managed, Goldphish Content) that enable organizations to deploy, manage, and track training at scale. Key capabilities include unlimited training campaigns, phishing email template building, campaign scheduling, reporting dashboards, Single Sign-On (SSO) integration, policy management, and white-labelled deployment options. The platform targets primarily SMBs and is designed for easy deployment through MSP and MSSP partners across more than 25 countries.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- Up to 87% reduction in phishing susceptibility after 12 months of continuous training and simulation campaigns (industry benchmark from KnowBe4)
- +5 more outcomes
Companies that use GoldPhish
Customer profileSegments3 records
Ideal customer profiles3 records
GoldPhish technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
GoldPhish partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Munich RecoreMunich Re leverages GoldPhish as a risk management tool for policyholders. They offer the platform to cyber insurance customers to help reduce human risk, which drives most cyber insurance claims. The partnership focuses on prevention rather than just protection, allowing Munich Re to provide added value to their policyholders while reducing claims risk.
Scale indicators2 records
Recent moves6 records
Expansion highlights6 records
GoldPhish competitors and assessment
Company assessmentDirect peers
- KnowBe4: Market leader in security awareness training and phishing simulation, acquired by Vista Equity Partners for ~$4.3B. Directly comparable product offering (training + simulated phishing) targeting the same buyer category, though focused primarily on enterprise and mid-market.
- Inspired eLearning: Security awareness and compliance training provider with phishing simulation, courses, and content library. Comparable offering targeting SMB and mid-market with similar subscription-based delivery model.
- Terranova Security: Canadian security awareness training vendor offering phishing simulation, training content, and partner programs. Closely comparable product offering with strong MSSP/channel partner emphasis similar to GoldPhish's go-to-market.
Broad incumbents
- Proofpoint Security Awareness: Enterprise security vendor offering a security awareness training module as part of its broader people-centric security platform. Comparable core use case (phishing simulation, awareness training) but bundled into a much larger enterprise security portfolio.
- SANS Institute: Largest cybersecurity training organisation globally, offering both deep technical training and end-user security awareness programs (SANS Security Awareness). Overlaps in the awareness/phishing training market but primarily known for technical security training.
Emerging players
- Hoxhunt: Security awareness platform combining gamified phishing simulations with personalised training, focused on enterprise and mid-market. Comparable product category with overlapping feature set (simulated phishing, reporting metrics) and a similar modern, engagement-driven content philosophy.
- NINJIO: Cybersecurity awareness training provider using short, animated, story-based micro-learning episodes. Closely comparable in content format (bite-sized, personality-driven episodes) and SMB-to-mid-market positioning.
- Phished: European-based (Belgium) security awareness and phishing simulation platform focused on SMB and mid-market. Direct overlap in product offering and customer segment, making it one of the closest geographic and segmental competitors.
- CybSafe: UK-based security awareness and human risk management platform that combines training with behavioural analytics. Comparable in geography (UK HQ) and SMB-to-mid-market focus, with adjacent analytics-led positioning.
Regional players
- Astra Security (TM): SMB-focused cybersecurity platform including training and phishing components, primarily serving the Indian and Asia-Pacific market. Partial overlap in awareness training functionality and SMB focus but largely non-overlapping geography.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
GoldPhish social profiles
Digital presenceGoldPhish financial estimates
Financial estimateRevenue estimate
Valuation estimate
GoldPhish leadership team
Management profileNumber of profiles
Profiles5 records
GoldPhish funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
GoldPhish M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about GoldPhish
What does GoldPhish do?
GoldPhish provides a SaaS security awareness training platform that combines bite-sized micro-learning training modules with realistic phishing simulation campaigns and a one-click email threat reporting tool. The platform is built specifically for small and mid-sized organisations that lack dedicated security teams, offering unlimited training campaigns, phishing simulations, reporting dashboards, SSO, and white-labelled deployment options for MSP/MSSP partners.
Is GoldPhish a public or private company?
GoldPhish is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was GoldPhish founded?
GoldPhish was founded in 2016. It employs 1 to 10 people.
Where is GoldPhish based?
GoldPhish is headquartered in London, United Kingdom, in the Europe region.
How does GoldPhish make money?
Two revenue lines are on record. Subscription Licensing is the primary driver. The others are partner/Channel Revenue.
Who are GoldPhish's main competitors?
Direct peers on record are KnowBe4, Inspired eLearning and Terranova Security. Broad incumbents are Proofpoint Security Awareness and SANS Institute. Emerging players are Hoxhunt, NINJIO, Phished and CybSafe. Astra Security (TM) is listed as a regional player.
Does GoldPhish have an API?
No public API is recorded for GoldPhish.
What industry is GoldPhish in?
GoldPhish's product category is Security Awareness Training Software. Its primary akta.pro industry code is HDADAKAJ, Security Awareness & Phishing Simulation (Email/Collab-focused), with a secondary code of BPAEANAF, Cybersecurity Training & Awareness Programs. Its NAICS code is 611420 and its SIC code is 8200.