A flat price per plan, excluding VAT
Every plan includes unlimited simulations, automated training, the dashboard and the PDF report. Within your plan, the price does not change with the number of users.
Our plans
Starter
Up to 50 users
billed €950.40 per year excl. VAT billed monthly, cancel anytime
about €1.6 per employee per month for 50 employees
- Unlimited phishing simulations
- 80 scenarios in French and English
- Automated training after a click
- Dashboard and risk score
- Email support
- PDF report and CSV export
Pro
Up to 200 users
billed €2,390.40 per year excl. VAT billed monthly, cancel anytime
about €1 per employee per month for 200 employees
- Unlimited phishing simulations
- 80 scenarios plus your own templates
- Automated training and course builder
- Full dashboard
- Comparison across departments and teams
- PDF report for your audits
- Priority support
Enterprise
Large organisations and specific needs
- Everything in Pro, plus:
- SSO with your identity provider
- Custom training content
- Assisted onboarding
- Scenarios based on attacks you actually received
- SLA on request
Most tools on the market charge €5 to €12 per user per month. Ask Thomas, our security engineer
nophi.sh is priced per plan, with no per-user fee. Starter: €99/month excl. VAT, or €79.20/month billed annually (€950.40 per year excl. VAT), up to 50 users. Pro: €249/month excl. VAT, or €199.20/month billed annually (€2,390.40 per year excl. VAT), up to 200 users. Enterprise: custom. 14-day free trial, no credit card. Data hosted in France.
Compare plans
| Starter | Pro | Enterprise | |
|---|---|---|---|
| Simulation | |||
| Email phishing simulations | |||
| Customizable templates | Limited | ||
| Scheduled campaigns | |||
| Training | |||
| Automatic post-failure training | |||
| Courses with quiz | |||
| Completion tracking | |||
| Analytics and reports | |||
| Basic dashboard | |||
| Comparison across departments and teams | |||
| Per-person risk scoring | |||
| PDF report and CSV export | |||
| Support and integration | |||
| Email support | |||
| Priority support | |||
| SSO | |||
| Assisted onboarding | |||
Frequently asked questions
How does the free trial work?
You get 14 days of full access, no credit card. Nothing is charged when the trial ends: pick a plan to continue, otherwise your data is deleted after 30 days.
Can I change plans at any time?
Yes, you can switch between plans at any time. Upgrades take effect immediately, and downgrades apply at the end of your current billing period. No data is lost when switching.
Is there a minimum commitment?
No commitment on the monthly plan: cancel anytime. The annual plan is billed once for the year, with a 20% discount. You can cancel before renewal.
Does the price depend on the number of users?
The price is flat per plan: Starter up to 50 users, Pro up to 200. Beyond that, Enterprise is custom. Within your plan the price does not change with the number of users. All prices exclude VAT.
Do you offer enterprise pricing?
Yes. Enterprise is quoted: SSO with your identity provider, custom training content, assisted onboarding, scenarios based on attacks you actually received, SLA on request. Write to Thomas to discuss it.
Is support included in all plans?
Yes. Every plan includes email support in English or French. Technical questions go to Thomas, our security engineer.
Are we allowed to test our employees?
Yes, as long as you tell them. Inform employees and, in France, the works council (CSE) that an awareness program exists, without announcing campaign dates. Under the GDPR the processing rests on legitimate interest. Results are used to train people and should not be used to sanction them.
How much IT time does it take?
About 15 minutes of setup: import your staff (CSV or Microsoft 365 / Entra ID sync) and pick a scenario. The one technical step on top is allow-listing nophi.sh in your email system so simulations reach the inbox. Thomas can walk your IT provider through it.
How will our teams react?
Better when the program is announced as a team exercise, for example with a message from management before the first campaign. Whoever clicks sees a short explanation of the signs they missed, then gets a course to complete, with reminders.
Where is our data?
In France, with Nextmap, a French operator that runs its own network (AS35426). Passwords typed into the fake login pages are never stored. A data processing agreement (DPA) is available on request.
Try it with your own team for 14 days
All features, no credit card. Nothing is charged when the trial ends.
Start 14-day free trial, no cardData hosted in France