PhishByte
Phishing awareness training and simulations for Australian businesses
About PhishByte
PhishByte is a phishing simulation and security awareness training platform built by Australian IT firm Pacen for small and medium-sized businesses. It sends realistic phishing tests across email, voice and chat, delivers just-in-time micro-lessons when someone clicks, and tracks progress with per-employee Human Risk Scores. A free plan covers Australian teams of up to 10 users, and MSPs can run it multi-tenant across clients.
Pros & Cons
Pros
- Genuinely free plan for Australian teams of up to 10 users, with no credit card or expiry
- Transparent published per-user pricing that drops as low as A$10.80/user/year at volume
- Covers more than email: deepfake voice phishing, conversational lures and lookalike domains are in every plan
- Local Australian focus, with templates based on local attack patterns and alignment to ACSC and Essential Eight guidance
- Multi-tenant MSP management and white-labelling for providers serving many clients
- Vanta and Drata sync makes training evidence easy to feed into compliance audits
Cons
- Free plan is limited to Australian businesses and subject to an eligibility review
- Paid plans are billed annually only, with no monthly option
- AI phishing websites, AI employee profiling, SSO and white-labelling are reserved for Enterprise
- Newer product with few independent user reviews on Capterra or G2 yet
- Content and positioning are Australia-centric, so teams elsewhere may find KnowBe4 or Hoxhunt a better fit
Key Features
Multi-vector phishing simulations
Test staff with phishing emails, malicious links, attachments, conversational email lures, deepfake voice phishing and lookalike sender domains.
Template and landing-page library
135+ phishing email templates and 75+ hosted phishing website replicas modelled on real attacker techniques, including Australian attack patterns.
AI-generated phishing emails and sites
Generate a full phishing email from a prompt (Professional and Enterprise), and build matching landing pages from a prompt, a cloned URL or a screenshot (Enterprise).
Just-in-time training
Employees who interact with a simulated phish land on an immediate educational page, backed by 50+ micro-learning modules with videos, quizzes and badges.
Human Risk Scores and reporting
Dashboards show click rates, reporting behaviour, engagement, departmental risk segmentation and improvement over time, plus compliance reports.
AI employee profiling
Enterprise plan builds individual risk profiles from simulation, training and engagement data and recommends the content each person needs.
Directory sync and Report Phish button
Sync users from Microsoft Entra ID or Google Workspace and add a one-click Report Phish button to Outlook and Gmail.
Compliance and LMS integrations
Push training completion to Vanta and Drata, send campaign data via webhooks, and export modules to an existing LMS with SCORM.
MSP multi-tenant management
Managed service providers run simulations, training and per-client risk reporting from one platform, with white-labelling on Enterprise.
Security and data residency
SOC 2 Type 2 attested, GDPR aligned, WCAG 2.2 AA training content, admin TOTP MFA, and a choice of 10 global data storage locations.
Pricing
- Up to 10 users, no expiry
- Core phishing simulation access
- Limited phishing email library
- Basic training modules
- Essential reporting
- 1 complimentary onboarding session
- Australian businesses with 1-10 employees, subject to eligibility review
- From 11 users, billed annually
- Volume pricing down to A$10.80/user/year at 1,000+ users
- Full training library and phishing templates
- AI-generated phishing emails
- Human risk scoring and behavioural reporting
- Integrations (Entra ID, Google Workspace, Vanta, Drata, SCORM, webhooks)
- Configurable notifications
- Minimum 25 users, billed annually
- Volume pricing down to A$15/user/year at 1,000+ users
- SSO (SAML) and advanced governance
- AI-generated phishing websites
- AI-powered employee profiling
- White-labelling with custom domain
- Priority support and tailored rollout
Best For
Security awareness for Australian SMBs
Small and mid-sized businesses run recurring phishing tests and bite-sized training without a dedicated security team, starting free for up to 10 staff.
Essential Eight and Privacy Act readiness
Organisations use simulations, training records and compliance reports to show user awareness training as part of ACSC Essential Eight and data breach obligations.
MSP security service add-on
Managed service providers deploy phishing testing across their client base from one multi-tenant console and present per-client risk scores at quarterly reviews.
High-risk industries
Accounting, legal, conveyancing, real estate and construction firms train staff against invoice fraud, payment redirection and business email compromise.
Measuring human cyber risk
Leaders track click and reporting rates, department-level risk and individual Human Risk Scores to show improvement over time.
Similar Tools
Devicie
Microsoft Intune deployment and automation at scale
Optery
Remove your personal information from the internet
CrowdSec
Collaborative threat intelligence powered by 70,000+ security engines
Faraday
All-in-one security platform for vulnerability management and pentesting
GreyNoise
Real-time intelligence for modern threats
Matano
Open source cloud-native SIEM built on a security data lake for AWS