Skip to content

A flat price per plan, excluding VAT

Every plan includes unlimited simulations, automated training, the dashboard and the PDF report. Within your plan, the price does not change with the number of users.

-20%

Our plans

Starter

Up to 50 users

€79.20 €99 /month excl. VAT

billed €950.40 per year excl. VAT billed monthly, cancel anytime

about €1.6 per employee per month for 50 employees

Start 14-day free trial, no card
  • Unlimited phishing simulations
  • 80 scenarios in French and English
  • Automated training after a click
  • Dashboard and risk score
  • Email support
  • PDF report and CSV export
Recommended

Pro

Up to 200 users

€199.20 €249 /month excl. VAT

billed €2,390.40 per year excl. VAT billed monthly, cancel anytime

about €1 per employee per month for 200 employees

Start 14-day free trial, no card
  • Unlimited phishing simulations
  • 80 scenarios plus your own templates
  • Automated training and course builder
  • Full dashboard
  • Comparison across departments and teams
  • PDF report for your audits
  • Priority support

Enterprise

Large organisations and specific needs

Custom
Talk to Thomas
  • Everything in Pro, plus:
  • SSO with your identity provider
  • Custom training content
  • Assisted onboarding
  • Scenarios based on attacks you actually received
  • SLA on request

Most tools on the market charge €5 to €12 per user per month. Ask Thomas, our security engineer

nophi.sh is priced per plan, with no per-user fee. Starter: €99/month excl. VAT, or €79.20/month billed annually (€950.40 per year excl. VAT), up to 50 users. Pro: €249/month excl. VAT, or €199.20/month billed annually (€2,390.40 per year excl. VAT), up to 200 users. Enterprise: custom. 14-day free trial, no credit card. Data hosted in France.

Compare plans

Starter Pro Enterprise
Simulation
Email phishing simulations
Customizable templates Limited
Scheduled campaigns
Training
Automatic post-failure training
Courses with quiz
Completion tracking
Analytics and reports
Basic dashboard
Comparison across departments and teams
Per-person risk scoring
PDF report and CSV export
Support and integration
Email support
Priority support
SSO
Assisted onboarding

Frequently asked questions

How does the free trial work?

You get 14 days of full access, no credit card. Nothing is charged when the trial ends: pick a plan to continue, otherwise your data is deleted after 30 days.

Can I change plans at any time?

Yes, you can switch between plans at any time. Upgrades take effect immediately, and downgrades apply at the end of your current billing period. No data is lost when switching.

Is there a minimum commitment?

No commitment on the monthly plan: cancel anytime. The annual plan is billed once for the year, with a 20% discount. You can cancel before renewal.

Does the price depend on the number of users?

The price is flat per plan: Starter up to 50 users, Pro up to 200. Beyond that, Enterprise is custom. Within your plan the price does not change with the number of users. All prices exclude VAT.

Do you offer enterprise pricing?

Yes. Enterprise is quoted: SSO with your identity provider, custom training content, assisted onboarding, scenarios based on attacks you actually received, SLA on request. Write to Thomas to discuss it.

Is support included in all plans?

Yes. Every plan includes email support in English or French. Technical questions go to Thomas, our security engineer.

Are we allowed to test our employees?

Yes, as long as you tell them. Inform employees and, in France, the works council (CSE) that an awareness program exists, without announcing campaign dates. Under the GDPR the processing rests on legitimate interest. Results are used to train people and should not be used to sanction them.

How much IT time does it take?

About 15 minutes of setup: import your staff (CSV or Microsoft 365 / Entra ID sync) and pick a scenario. The one technical step on top is allow-listing nophi.sh in your email system so simulations reach the inbox. Thomas can walk your IT provider through it.

How will our teams react?

Better when the program is announced as a team exercise, for example with a message from management before the first campaign. Whoever clicks sees a short explanation of the signs they missed, then gets a course to complete, with reminders.

Where is our data?

In France, with Nextmap, a French operator that runs its own network (AS35426). Passwords typed into the fake login pages are never stored. A data processing agreement (DPA) is available on request.

Try it with your own team for 14 days

All features, no credit card. Nothing is charged when the trial ends.

Start 14-day free trial, no card

Data hosted in France

Ask Thomas, our security engineer