PhishX
PhishX is a Brazil-based SaaS Human Risk Management platform delivering AI-powered phishing simulations, gamified security awareness training, and behavioral analytics to enterprise customers in 100+ countries via multi-tier subscriptions, channel partners, and a Google Workspace Marketplace listing.
- Company typePrivate
- Founded2016
- HeadquartersSão Paulo, Brazil
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What PhishX does
PhishX, operated by Brazilian limited liability company P2 TECHNOLOGY INFORMÁTICA LTDA and headquartered in Cotia (São Paulo), Brazil, is a 100% SaaS Human Risk Management (HRM) platform that combines AI-powered phishing simulations, gamified interactive training modules, vulnerability management, policy management, and Shadow IT visibility into a single integrated ecosystem. Founded in 2016, the company serves enterprise customers across banking, retail, healthcare, education, technology, government, and energy sectors, claiming presence in more than 100 countries with 5,000+ companies and 5M+ people impacted over its nine-year operating history. The platform runs on a multi-cloud architecture spanning Google Cloud, AWS, and IBM Cloud, and integrates natively with Microsoft 365, Google Workspace, Slack, Discord, Teams, Workvivo, WhatsApp, SMS, Telegram, and email, with API orchestration into SIEM, SOAR, BI, and Big Data platforms and SSO via Azure AD. A dedicated Google Workspace add-on (PhishX Assistant) extends the platform into the Google Workspace Marketplace as a separate distribution channel.
The core product surface consists of PhishX HRM (the executive visibility and governance layer), Phishing Simulations, Interactive Training Modules, Vulnerability Management, Policy Management, Shadow IT Management, and the PhishX Assistant. Revenue is generated through three subscription tiers (Standard, Advanced, Premium) sold on annual, biannual, triennial, or longer prepaid terms, with scope defined in customized Quotation, Commercial Proposal, and Technical Proposal documents and pricing indexed to IGP-M/FGV for multi-year contracts. Optional professional services cover platform activation/onboarding and custom content/template creation, billed separately per Commercial Proposal. Go-to-market is a hybrid of direct enterprise field sales (Request a Demo, [email protected], [email protected]) and a channel partner program ([email protected]) with 40+ business partners and a Google Workspace Marketplace listing. The company has raised two disclosed funding rounds (2016 led by ACE Ventures with 4Legacy and Bossa Invest; 2025 with Bossa Invest), with no dollar amounts publicly disclosed, and reports 1–10 employees per firmographic data (one source estimating 11–50), suggesting a lean operating model relative to its claimed customer footprint.
PhishX firmographics
Firmographics- Name
- PhishX
- Legal name
- P2 TECHNOLOGY INFORMÁTICA LTDA
- Website
- https://phishx.io
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- PhishX is a Brazil-based SaaS Human Risk Management platform delivering AI-powered phishing simulations, gamified security awareness training, and behavioral analytics to enterprise customers in 100+ countries via multi-tier subscriptions, channel partners, and a Google Workspace Marketplace listing.
- Ownership category
- akta.pro rank
PhishX industry classification
Industry- Product category
- Security Awareness Training / Human Risk Management
- NAICS
- Other Computer Related Services (541519), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Security Awareness & Phishing Simulation (Email/Collab-focused) (HDADAKAJ)
Keywords
Where PhishX is headquartered
LocationHeadquarters
- HQ city
- São Paulo
- HQ country
- Brazil
- HQ region
- Latin America
Offices1 record
Markets served
PhishX business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Platform Subscription Licensing: PhishX provides licensing of non-customizable SaaS computer programs (PhishX platform) for cybersecurity awareness training and human risk management. Pricing is structured in three tiers (Standard, Advanced, Premium) with scope defined in Quotation, Commercial Proposal, and Technical Proposal. The service is prepaid with annual, biannual, triennial, or longer subscription terms, with scope changes requiring new formal agreements.
- Activation/Onboarding Services: Optional professional services for platform activation and onboarding, covering training on use and configuration of PhishX. Billed separately per Commercial Proposal based on the plan and service package selected.
- Custom Content & Template Creation: Custom content creation services for personalized training, phishing simulation templates, campaigns, and other digital creations. Charged via specific budget requests through the sales team ([email protected]).
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Standard Plan — Essential features for campaigns and training |
| Subscription | Multi-year contract | Advanced Plan — Additional channels, API, automations, and complete analytics |
| Subscription | Multi-year contract | Premium Plan — Compliance, audits, and regulated environments with 10+ native channels |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels9 records
PhishX product offering
Product offeringCore offering
PhishX provides a 100% SaaS Human Risk Management (HRM) platform that combines AI-powered phishing simulations, interactive gamified training modules, policy and vulnerability management, Shadow IT visibility, and executive-level behavioral risk dashboards. The platform is delivered to enterprise customers via multi-cloud infrastructure with native integrations across Microsoft 365, Google Workspace, Slack, Discord, Teams, WhatsApp, SMS, and Telegram, supported by API orchestration into SIEM/SOAR/BI ecosystems. A standalone Google Workspace add-on (PhishX Assistant) enables employees to report suspicious emails from Gmail.
Product overview
PhishX is a 100% SaaS Human Risk Management (HRM) platform providing a complete ecosystem for people-centric cybersecurity. The platform combines automated phishing simulations, interactive training modules, vulnerability management, policy management, and Shadow IT management. Key products include PhishX HRM (the core strategic platform), Phishing Simulations (AI-powered), Interactive Training Modules (gamified), PhishX Assistant (Google Workspace add-on), Vulnerability Management, Policy Management, and Shadow IT Management. The platform offers three subscription tiers: Standard (essential features), Advanced (API/automations), and Premium (compliance/audit focus with 10+ channels). Native integrations span Teams, Slack, Google Workspace, WhatsApp, SMS, Telegram, and enterprise systems via APIs.
Differentiator
Problem solved
Functional benefit
Products and services
- PhishX HRM Platform Cloud-based Human Risk Management SaaS platform for enterprise security teams, combining AI-powered phishing simulations, gamified training modules, policy management, vulnerability management, Shadow IT visibility, and executive behavioral risk dashboards with omnichannel delivery and API integrations into enterprise ecosystems.
- PhishX Assistant Google Workspace add-on that integrates with Gmail to allow employees to report suspicious emails directly to the organization's security team, enhancing phishing detection and response workflows.
Quantifiable outcome
- 90% of cyber attacks start with phishing — PhishX transforms the human factor from the most volatile link into a strategic intelligence asset through continuous behavioral modeling and measurable risk reduction.
- +1 more outcomes
Companies that use PhishX
Customer profileNamed customers8 records
Ideal customer profiles1 record
PhishX technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration19 records
AI capability4 records
Feature9 records
PhishX partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core and secondary.
- Google Cloud PlatformcorePhishX operates its platform on Google Cloud infrastructure. Google Analytics is used for website analytics, and Google Workspace integrations (Gmail, Google Chat) are native channels available on the PhishX platform. The PhishX Assistant is published on the Google Workspace Marketplace for enterprise deployment.
- Amazon Web Services (AWS)corePhishX uses AWS infrastructure as one of its cloud service providers for platform operations and delivery, forming a core part of its SaaS infrastructure stack alongside Google Cloud and IBM Cloud.
- IBM CloudcorePhishX uses IBM Cloud as one of its cloud service providers for platform operations and delivery, forming part of the multi-cloud infrastructure supporting the PhishX HRM platform.
- Microsoft (Microsoft 365, Azure AD)corePhishX provides native integration with Microsoft 365 (Outlook, Teams, Azure AD) as one of its primary communication and authentication channels. The PhishX platform supports SSO via Azure AD and integrates with Microsoft Defender for enhanced security posture. Microsoft Outlook client guides are available in the documentation portal.
- Google WorkspacecorePhishX provides native integration with Google Workspace (Gmail, Google Chat) as primary communication channels. The PhishX Assistant is distributed as a Google Workspace Marketplace add-on for easy enterprise deployment, with dedicated configuration guides in the documentation portal.
- SlacksecondaryPhishX integrates natively with Slack as a communication channel for phishing simulations, training notifications, and security awareness campaigns, enabling organizations to run awareness programs directly through Slack workspaces.
- DiscordsecondaryPhishX integrates natively with Discord as a communication channel for delivering training content and security notifications to Discord communities and teams.
- WorkvivosecondaryPhishX integrates natively with Workvivo as an enterprise communication channel, enabling phishing simulations and training notifications to be delivered through the Workvivo employee experience platform.
- Channel Partners & Strategic IntegratorssecondaryPhishX operates a formal partnership program ([email protected]) through which resellers, integrators, and strategic channel partners represent and integrate the PhishX platform globally, extending market reach beyond direct sales. The program supports organizations in representing or integrating the platform across different regions and customer segments.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
PhishX competitors and assessment
Company assessmentDirect peers
- KnowBe4: KnowBe4 is the global market leader in security awareness training and phishing simulation, offering the closest direct competition to PhishX's core SACBT product category with a comparable focus on phishing simulations and human risk reduction.
- Terranova Security: Terranova Security is a Gartner-recognized security awareness and phishing simulation vendor serving global enterprises, with comparable content library, phishing simulation, and compliance tracking capabilities to PhishX.
- Cofense: Cofense (formerly PhishMe) is a phishing-specific security awareness vendor offering phishing simulations, threat intelligence, and a phishing defense platform. It overlaps directly with PhishX's phishing simulation and reporting capabilities.
Broad incumbents
- Proofpoint Security Awareness: Proofpoint Security Awareness is part of Proofpoint's broader enterprise security portfolio covering email security, threat intelligence, and compliance. It directly competes in the SACBT space but bundles awareness into a much wider cybersecurity platform.
- Mimecast: Mimecast is an enterprise email security and resilience vendor that has expanded into security awareness training. It overlaps with PhishX at the email-phishing intersection but operates as a broader email security platform.
- Sophos Phish Threat: Sophos offers Phish Threat as part of its broader endpoint and network security portfolio, providing phishing simulations and awareness training as a bundled capability. It competes with PhishX as part of a wider cybersecurity suite rather than as a specialist.
Emerging players
- Hoxhunt: Hoxhunt is a fast-growing security behavior change platform combining AI-personalized phishing simulations with gamified training. It is comparable as a next-generation, AI-driven alternative to PhishX in the behavioral security category.
- NINJIO: NINJIO delivers security awareness training built on episodic animated micro-learning content with phishing simulation components, directly comparable to PhishX's interactive training and simulation modules.
- AwareGO: AwareGO offers security awareness training with human risk assessment and short-form video content, comparable to PhishX's gamified microlearning and behavioral risk modules.
- CyberReady (formerly CyberDefenders): CyberReady is an automated security awareness and phishing simulation platform targeting mid-market and enterprise customers. It competes in the same SACBT category as PhishX with a focus on ease-of-deployment and automation.
Market position
Strengths4 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
PhishX social profiles
Digital presencePhishX compliance and trust
Trust signalCompliance6 records
PhishX financial estimates
Financial estimateRevenue estimate
Valuation estimate
PhishX leadership team
Management profileNumber of profiles
Profiles4 records
PhishX funding detail
Funding detailFunding overview
Funding rounds2 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
PhishX M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about PhishX
What does PhishX do?
PhishX provides a 100% SaaS Human Risk Management (HRM) platform that combines AI-powered phishing simulations, interactive gamified training modules, policy and vulnerability management, Shadow IT visibility, and executive-level behavioral risk dashboards. The platform is delivered to enterprise customers via multi-cloud infrastructure with native integrations across Microsoft 365, Google Workspace, Slack, Discord, Teams, WhatsApp, SMS, and Telegram, supported by API orchestration into SIEM/SOAR/BI ecosystems. A standalone Google Workspace add-on (PhishX Assistant) enables employees to report suspicious emails from Gmail.
Is PhishX a public or private company?
PhishX is a private company. It is classified as venture growth investor backed and is currently operating.
When was PhishX founded?
PhishX was founded in 2016. It employs 1 to 10 people.
Where is PhishX based?
PhishX is headquartered in São Paulo, Brazil, in the Latin America region.
How does PhishX make money?
Three revenue lines are on record. SaaS Platform Subscription Licensing is the primary driver. The others are activation/Onboarding Services and custom Content & Template Creation.
Who are PhishX's main competitors?
Direct peers on record are KnowBe4, Terranova Security and Cofense. Broad incumbents are Proofpoint Security Awareness, Mimecast and Sophos Phish Threat. Emerging players are Hoxhunt, NINJIO, AwareGO and CyberReady (formerly CyberDefenders).
Does PhishX have an API?
Yes. Open APIs for customized integrations with internal tools. PhishX offers API orchestration for ecosystems like Office 365, Google Workspace, SIEM, SOAR, BI, and Big Data platforms. Developer documentation is at docs.phishx.io.
What industry is PhishX in?
PhishX's product category is Security Awareness Training / Human Risk Management. Its primary akta.pro industry code is HDADAKAJ, Security Awareness & Phishing Simulation (Email/Collab-focused). Its NAICS code is 541519 and its SIC code is 7372.