About
Who's behind nophi.sh
nophi.sh is published in Paris by NXT Initiative SAS. The team: the two co-founders of French hosting provider Nextmap, and security engineer Thomas Ferreira.
Phishing targets mid-sized companies too
57% of French SMEs suffered at least one cyberattack in the last 12 months (Hiscox, 2025). Awareness tools are often built for large groups and priced per user.
A company of 80 people rarely has a full-time CISO or weeks to spend configuring a tool.
nophi.sh is built for teams of 50 to 500 people in France and across Europe: scenarios in French and English, a flat price per plan, and a first campaign the same day.
Our goal: when an email looks off, your team's first reflex is to forward it.
The expertise behind nophi.sh
Two founders from the hosting world, and a security engineer who writes the scenarios.
Co-founders
Grégoire Mougeolle & Aloïs Oddon
Grégoire Mougeolle (President) and Aloïs Oddon also co-founded Nextmap, a French infrastructure operator running its own network (AS35426). Nextmap hosts nophi.sh and your data, in France.
Security engineer
Thomas Ferreira
CISSP, GCFA, GCIH and GCFE certified, Thomas comes from incident response and digital forensics. He writes the simulation scenarios, works on the analysis of forwarded emails and answers customers' technical questions.
Check for yourself
Test yourself: 10 emails, 2 minutes
The public nophi.sh game: spot the phishing emails among real ones. No sign-up.
Play the gameAsk an engineer
Thomas Ferreira answers technical questions himself: allow-listing, GDPR, how a campaign runs.
Ask Thomas, our security engineerData hosted in France
The platform and its data are hosted in France by Nextmap, a French operator that runs its own network (AS35426).
Read the privacy policyThe values that guide us
Simplicity
About 15 minutes of setup and an interface in English and French. Security does not have to be complicated to work.
Effectiveness
Realistic simulations and training at the moment of the mistake. You follow the effect in the dashboard, campaign after campaign.
Compliance
Dated awareness evidence for your NIS2, ISO 27001 or DORA audits, and a GDPR data processing agreement on request.
Innovation
An AI that explains its verdicts on forwarded emails, and an autopilot that retests people at risk more often.
Try nophi.sh with your team
14 days free, no credit card. Nothing is charged when the trial ends.
Data hosted in France