AfriPhish trains, tests and coaches your workforce against phishing and social engineering — in English, French and Arabic, mapped to the regulations that govern your markets.
Human risk overview
Organisation risk score
▾ 9 pts this quarter
Illustrative data
Why human risk
Independent research keeps reaching the same conclusion: most security incidents start with a human decision.
68%of breaches involve a non-malicious human element
USD 4.88Mthe global average cost of a data breach
Business email compromise and phishing rank among the most-reported cyber threats across African member countries
The platform
Six capabilities, one closed loop — localized, measured, and audit-ready.
Feature deep-dive
The rotating tour from our original site — because it earned its keep: each module, its moving parts, and what ships next.
72 branded, trilingual templates with pixel-faithful landing pages: mobile money, banking, courier, payroll, and more. Recurring series rotate templates automatically, and double-random scheduling stops employees tipping each other off.
Only on AfriPhish
Global platforms translate their content and call it coverage. AfriPhish is built from the ground up for how African organisations actually get attacked.
We're the only human-risk platform running WhatsApp smishing alongside email — including a link-free companion nudge matched to each email pretext. And with bring-your-own WhatsApp, campaigns land from your organisation's own verified WhatsApp Business number, not a stranger's.
Lures, courses and coaching authored in each language — including full right-to-left Arabic — not machine-translated afterthoughts. Your Casablanca, Dakar and Nairobi teams get the same quality.
POPIA, NDPA, Kenya DPA, Ghana PDPA, Rwanda CDPA, Morocco 09-08, Egypt PDPL — plus ISO 27001, NIST CSF, SOC 2 and PCI DSS. Reports speak the language your auditor reads.
Multi-channel attack simulation
Simulate the full spectrum of social-engineering attacks — across every channel your people use every day.
72 branded templates with pixel-faithful landing pages. Recurring series, double-random scheduling, and full EN/FR/AR localisation.
ready-made attack scenarios
attack families, from mobile money to BEC
custom campaigns with the drag-and-drop builder
languages, written natively — EN · FR · AR
training courses, incl. a 27-course IT/SecOps track
regulations and frameworks mapped
Compliance
Awareness programmes and audit evidence aligned with the data-protection laws and security frameworks your assessors ask about.
How it works
A continuous loop, not a one-off campaign.
Establish your baseline with a maturity assessment and a first phishing test.
How it works
A continuous loop, not a one-off campaign.
Establish your baseline with a maturity assessment and a first phishing test.
Assign role-relevant courses in the language each employee works in.
Run realistic phishing campaigns that mirror the lures African organisations actually receive.
Follow up risky behaviour instantly with short, specific coaching — not blame.
Export the evidence: risk scores, completion rates and trends for auditors and the board.
Roadmap
Built in the open: what's live on the platform today, and what's coming.
Live today
235 scenarios across 18 families, in EN, FR and AR.
Companion nudges and standalone sends — from your verified WhatsApp Business number.
A living score per person, with automatic nudges when it slips.
60+ courses, e-signed policies and board-ready reports.
Shipping next
Scripted calls impersonating IT support, HR and finance.
See whether your organisation's credentials appear in known breach data.
The free maturity assessment, fully trilingual.
Free tool
18 questions, under four minutes — score your human cyber risk across six dimensions, mapped to your country's data-protection law. No account needed.
Grade your domain's defences against email spoofing — SPF, DMARC and DKIM — in seconds. Free, instant, and no signup required.
Open the full checker on check.afriphish.com →Spoofing grade
Well protected
Every domain gets a grade from A to F.
Built with early-access partners across African financial services, telecoms and the public sector.
One platform, the whole continent — simulations and training delivered in the languages your cities actually speak.
Resources
Written for the admins who run the programme day to day.
Pricing
Start free. Upgrade when you're ready. Enterprise when you're regulated.
Kick the tyres for 14 days.
Up to 25 employees
For growing teams getting serious.
Up to 100 employees
For security teams that automate.
Up to 500 employees
For regulated, multi-market organisations.
Unlimited employees
All plans include SSL-secured delivery, GDPR-ready data handling, and a 30-day money-back guarantee. No credit card required for Trial.
Get started
Tell us about your organisation and we'll walk you through the platform — training, simulations, coaching and reporting, end to end.
English, French & Arabic · Built for African organisations