In short: Sophos Phish Threat is Sophos's phishing simulation and security awareness training product. It offers more than 30 training modules in nine languages, templates from beginner to expert, a one-click Outlook reporting add-in and links with Sophos Email, all managed in Sophos Fusion. It suits organisations already using Sophos who want training alongside their other protection.
Where Phish Threat fits
Phish Threat is one of the security awareness training vendors we supply. It is a natural fit when Sophos is already your main security supplier, because simulations, training and reports sit next to your endpoint and email protection rather than in a separate product.
For the full product detail, including set-up, see Sophos Phish Threat on our Sophos specialist site. This page focuses on when to choose it.
What it includes
- Phishing simulations using templates that range from beginner to expert, informed by Sophos threat research
- More than 30 training modules covering security and compliance topics, available in nine languages
- Awareness Factor reporting: a dashboard of campaign results, user susceptibility and trends
- Phish Threat Outlook add-in for Exchange and Microsoft 365, so staff report suspicious email in one click and get instant feedback on simulations
- Links with Sophos Email: through Sophos Synchronized Security, users who were warned about or blocked from risky sites can be enrolled in targeted simulations and training
Sophos describes Phish Threat as part of Sophos Fusion, the new name for its Sophos Central console. Sophos says the change is an upgrade rather than a retirement, so existing Sophos Central customers carry on as before while the new name appears.
How Phish Threat campaigns work
Sophos's admin documentation groups campaigns into four types:
| Campaign type | What it tests or delivers |
|---|---|
| Phishing | A simulated phishing email, to see who opens and clicks |
| Credential Harvesting | A link to a fake sign-in page, to see who enters details |
| Attachment | A simulated malicious attachment, to see who opens it |
| Training | Mandatory training assigned to users without an attack simulation |
You can run a single campaign or create a series of attack or training campaigns, which is the simplest way to keep a year-round programme going without planning each month by hand.
Before the first campaign, Sophos asks you to verify your email domains. If you use Microsoft 365, turning on M365 Direct Delivery avoids manually allow-listing Phish Threat's domains, URLs and IP addresses; Google Workspace customers allow-list Phish Threat's IP addresses instead. Results then appear on the Phish Threat dashboard and in its reports.
When to choose Phish Threat, and when not to
Choose it when:
- You already manage Sophos products in Sophos Fusion, formerly Sophos Central, and want one console
- You use Sophos Email and want risky users enrolled in training automatically
- You need modules in several languages for a multilingual workforce
Look elsewhere when:
- You want policy sign-off, dark web checks or human risk scoring in the same platform. Compare usecure or Breach Secure Now
- Your email security comes from another vendor whose own add-on would keep reporting in one place
See the full security awareness training platforms compared table.
How we help
We license Phish Threat alongside your other Sophos products, verify your domains, set up Direct Delivery or allow-listing and the Outlook add-in, and run a year-round schedule of simulations and training as part of managed security awareness training. Licensing details are on softwarelicensing.uk; for pricing, ask us for a quote.
Contact us to add Phish Threat to your Sophos estate.
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
How many languages does Sophos Phish Threat support?
Sophos states that its training modules are available in a choice of nine languages, and that its phishing simulations are translated into nine languages too.
Does Sophos Phish Threat have a report phishing button?
Yes. The Phish Threat Outlook add-in works with Exchange and Microsoft 365. Staff report suspicious emails in one click and get instant feedback when the message was a simulation.
Do I need other Sophos products to use Phish Threat?
It is managed in the Sophos console, so you need a Sophos account, and it delivers most when you already use Sophos, especially Sophos Email, because it can enrol users who were warned or blocked into targeted training.
Is Sophos Phish Threat managed in Sophos Central?
Yes. Sophos Central is becoming Sophos Fusion, and Phish Threat is managed there alongside your other Sophos products, so there is no separate portal to learn. Existing Sophos Central customers keep working as they do today while the new name rolls out.
Does Sophos Phish Threat work with Google Workspace?
Yes. Sophos documents set-up for both Microsoft 365 and Google Workspace. With Microsoft 365 you can use Direct Delivery instead of manual allow-listing; with Google Workspace you allow-list Phish Threat's IP addresses.