Insights / Costs
How much does a phishing simulation cost?
The range is wide, because "phishing simulation" means two different things: a one-off campaign with a debrief (a workshop, from about PLN 4,500 net) or a standing feature in a platform, billed per employee per month. Here is what drives the price and which model makes sense for you.
Two billing models
| Model | What it includes | Indicative price |
|---|---|---|
| One-off campaign | Scenario, send-out, open/click measurement, 2 h debrief. | from PLN 4,500 net |
| Inside the platform | Repeatable campaigns, automatic remediation training for clickers, dashboard. | from PLN 15 / employee / mo. |
A one-off campaign is good to start with. But phishing is not a one-time event — behaviour changes only with repetition. For larger teams the per-user model usually costs less per unit of effect.
What actually drives the price
- Headcount — the main factor for the platform; the bigger the team, the lower the tier rate.
- Realism — scenarios tailored to your company and brands cost more than off-the-shelf.
- Remediation — measurement only vs training assigned to those who clicked.
- Report — a plain result vs a report ready for the board and a NIS2 auditor.
- Cadence — one-off vs a cycle that reveals a trend.
A note on legality. Simulating on your own staff is allowed, but it has limits: a legal
basis, an information duty and a line against employee surveillance. We unpack this in
phishing simulations and GDPR.
Want a figure for your team? Tell us how many employees you have and we'll send a scoped quote, or start a free trial.