Enterprise phishing simulation tools typically charge $3-5 per user annually, costing a 10,000-person company up to $50,000. A developer proposes a cost-effective alternative using the open-source GoPhish framework on a $37/month Azure VM, offering unlimited simulations for a fraction of the price.

The core GoPhish project is a decade-old, MIT-licensed tool with 10,000+ installations. It allows creating campaigns and tracking user clicks, but lacks enterprise essentials like MFA, encryption at rest, and audit logging. The developer forked it to add these production-ready features.

This modified version includes SSO, AES-256 encryption, SIEM-compatible audit logs, and one-click Azure/AWS deployment. For a 10,000-user organization, the self-hosted annual cost drops to roughly $360 versus $30,000 for commercial platforms like KnowBe4, keeping sensitive data on company infrastructure.