CanIPhish Roadmap
Curious what the team at CanIPhish are working on? Please note the roadmap is subject to change.
- 1 In Progress
- 1 Pending
- 71 Completed
- 73 Total Items
Development Timeline
Showing 73 of 73 items
No roadmap items match the selected filter.
2026
-
Attack Surface Protection
Continuously discover and monitor your organization's internet-facing assets, highlighting exposed services, misconfigurations, and other weaknesses that attackers could use to gain an initial foothold.
-
Configurable Phishing Education Pages
Enterprise subscribers will be able to fully customize the phishing education page shown to users when they interact with a simulated phishing email.
-
Certificate of Completion Library
Customers will be able to choose between a half dozen certificate of completion templates that are automatically issued to employees upon completing their assigned training.
-
Domain Protection
Helping organizations set up, monitor, and protect their domains through SPF, DKIM, DMARC, and other related email authentication and security protocols.
-
Brand Protection
Continuously monitor for lookalike domains impersonating your brand, with AI-powered analysis, evidence capture, and automated takedown requests against confirmed phishing threats.
-
Report Email Sandboxing Enhancements
Our automated AI Analysis capability will gain access to enhanced attachment and URL sandboxing and detonation capabilities, further improving phishing detection when employees report suspicious emails.
-
Public Status Page
A public status page displaying product uptime and availability across the various aspects of the CanIPhish platform.
-
AI Program Manager
An interactive AI-powered chat-based tool used to create and continuously manage a personalised training program through a simple back-and-forth chat with CanIPhish's AI training expert.
-
SCORM Import
Import your own SCORM-compliant training content into CanIPhish, allowing you to deliver existing e-learning courses alongside our native training modules.
-
6x New Training Modules (Compliance Themed)
Adding new compliance-themed training modules covering sexual harassment prevention, bullying and harassment prevention, workplace emotional intelligence, workplace health and safety, discrimination prevention, and the EU AI Act.
-
Platform Audit Log
Gain access to a full audit log that tracks platform use, from SMTP logging of email delivery to administrator actions and the timing of automated back-end functions.
-
Auto-Phish & Auto-Train
Automatically select the most appropriate phishing email and training module for each employee based on attributes known about that employee such as their job title, geographical location, prior phishing interactions, and more.
-
AI-Powered Employee Profiling
Take advantage of AI-driven insights into employee strengths, weaknesses, and recommendations to guide administrators on the best-suited content.
-
AI-Generated & Configurable Phishing Websites
Generate matching phishing websites on demand by cloning live sites, providing screenshots, or using prompts, with every element configurable within the platform.
-
AI-Generated Phishing Emails
Generate fully formed phishing emails on demand from a scenario, pretext, or target persona, including subject line, sender details, and body content.
-
10x New Training Modules
Creating 10x new training modules to cover various role-based training scenarios and a new regulatory training for NIS2.
-
Enhanced PDF Reporting
Uplifting PDF reports that can be generated within the platform to have a modern style.
-
Email Threat Analyzer Tool
Providing a free and public tool whereby .EML email files can be manually uploaded and analyzed for threats, with the results being available in the browser and as a downloadable PDF.
-
Email Add-In Embedded AI Analysis
Providing employees with an AI security coach that automatically analyzes emails directly in the CanIPhish Email Add-Ins for Outlook & Gmail.
-
AI-Powered Business Impact Mapping
Providing the ability to automatically categorize employees as low, moderate, high, or critical impact based on the role they perform, and using this to influence human risk scoring.
-
AI-Powered Reported Email Analysis
Use a range of automated insights to assist in the investigation of whether a reported email is a phish or false positive.
2025
-
Interactive Email Sandbox
Open suspected phishing emails in an isolated and temporary sandbox environment, allowing you to click links and open attachments without putting your computer at risk.
-
Clone Reported Phishing Emails
Convert real phishing emails into simulated phishing emails at the click of a button. Payloads are neutralised, images replaced, and the email is made safe for use.
-
Drata Integration
Automatically send employee certificates of completion to Drata to demonstrate security awareness training compliance!
-
New Training Modules
The team at CanIPhish are working towards releasing a tranche of 10 new training modules!
-
New Scheduled Reports
Schedule and send employee-centric reporting on human risk, dark web breaches, leaderboard scores, and more!
-
Simulated Voice Phishing
Engage employees in highly realistic simulated voice phishing calls powered by AI.
-
Human Risk Dashboard
Track historical, current, and projected human risk, alongside a comparison of similarly sized organizations.
-
Employee List Enhancements
Include additional employee attributes such as supervisor, language, country, and more.
2024
-
Simulated Callback Voice Phishing
Offering a callback voice phishing simulation service that's available globally.
-
SCORM Integration
Export training modules as SCORM packages.
-
v2 CanIPhish API
A complete rebuild of the CanIPhish API to include newly released functionality.
-
Conversational Phishing
Build trust over a back-and-forth conversation before delivering phishing payloads. Powered by Generative AI.
-
eLearning Training Modules
Increasing the number of training modules from 25 to 30.
-
Training Program Generator
Providing a multi-step wizard which captures organizational requirements and outputs best practice recommendations.
-
Additional Phishing Templates
Introducing an additional 6 phishing templates themed against popular Enterprise tools.
2023
-
Multi-Lingual Training Videos
Adding voice-overs for training videos in Arabic, Mandarin, and Hindi.
-
Certificates of Completion
Providing learners with a PDF certificate to evidence when they've completed training modules.
-
Intelligent Training Assignments
Using an ML-driven model to assign the most relevant trainings to employees.
-
Multi-Lingual Training Videos
Adding voice-overs for training videos in Spanish, Portuguese, and French.
-
SSO/SAML Integrated Authentication
Providing our customers with the ability to integrate their SSO Identity Provider with CanIPhish.
-
Dark Web Monitoring
Providing our customers with the ability to monitor if any email addresses have been associated with a data breach.
-
Customisable Transactional Emails
Customise emails such as scheduled reporting, training assignments, training reminders and more.
-
eLearning Training Modules
Increasing the number of training modules from 15 to 25.
-
eLearner Gamification
Learners will earn badges for performing positive actions. Learners are then ranked on a leaderboard.
-
SOC 2 Type 1 Certification
Providing external validation to CanIPhish customers that we take security seriously.
-
Multi-Lingual Phishing Emails
Seamlessly translate our phishing email library into 74 languages.
-
Multi-Lingual Phishing Websites
Using AI to seamlessly convert text on our phishing websites into a language supported by an employee's browser.
-
Enhanced Attachment Support
Increasing attachment support to include not only Word documents but also Excel and PowerPoint.
-
eLearning Training Modules
Increasing the number of training modules from 6 to 15.
-
eLearning Platform
Providing an interactive user training experience for targets who fall victim to a simulated phishing attack.
2022
-
Employee Risk Scoring
Providing the ability to see who your highest risk employees are.
-
Platform White-Labeling
White-Labeling will include the ability to specify custom domains and logos across a CanIPhish tenant.
-
Management APIs
Leverage the CanIPhish Management APIs to programmatically manage email templates, website templates, sender profiles, targets and campaigns.
-
Report Phish - Outlook Add-in
Providing the ability for users to report suspected phishing emails and track them against simulated phishing campaigns, ultimately providing a new user improvement metric.
-
Multi-region data storage
Choose between CanIPhish cloud storage located in Australia, the United States of America, the United Kingdom, Canada, South Africa or Germany (EU).
-
Phishing Templates
Introduced 8 new phishing email templates, 6 new phishing websites and 8 new sender profiles.
-
Report Phish - Gmail Add-in
Providing the ability for users to report suspected phishing emails and track them against simulated phishing campaigns, ultimately providing a new user improvement metric.
-
On Screen User Guide
CanIPhish aims to remove the complexity from conducting Phishing Simulations; this functionality is another step in that direction.
-
Target Users - Google Workspace Directory Integration
The ability to pull target user listings directly from Google Workspace is essential to increasing the ease-of-use of CanIPhish.
-
Target Users - Azure AD Integration
The ability to pull target user listings directly from Azure AD is essential to increasing the ease-of-use of CanIPhish.
2021
-
Phishing Templates
While existing sender, email and website phishing templates exist, we want to continue improving upon our service. Delivering templates that replicate the latest threat activity ensures we're delivering a best-of-breed solution.
-
Advanced Reporting
The ability to see analytical and executive level reporting on current and historical phishing campaigns is fundamental to understanding the success and benefit of using CanIPhish.
-
User Authentication - General Uplifts
Uplift the user registration, login, and password recovery portals.
-
Domain Tool APIs
Leverage the CanIPhish Domain Tools to perform programmatic scans of email receiver and sender supply chains.
-
General Availability Launch
General availability of CanIPhish. We believe that at this point, CanIPhish will offer a far better phishing simulation experience than any of our competitors in the market.
-
Self-Service Subscription Management
The ability for our customers to upgrade/downgrade subscription tiers with a fully self-service offering is a core functional requirement of CanIPhish.
-
Campaign Setup Wizard
The ability to use a wizard for target and template selection greatly improves the overall user experience of our customers.
-
Recurring Campaigns
Instead of manually creating multiple campaigns for every week/month/quarter of the year, create a single campaign with rotating templates that runs periodically.
-
Basic Reporting
The ability to see analytical and executive level reporting on current and historical phishing campaigns is fundamental to understanding the success and benefit of using CanIPhish.
-
Multi-Template Campaigns
The ability to include multiple email, website and sender phishing profiles in a single campaign greatly improves the overall success and security awareness benefit of a campaign.
-
User Guide
A fundamental requirement for using CanIPhish is to properly understand what's available and how various components should be used. As such, this is a key milestone in our roadmap.
-
Beta Launch
Public beta of CanIPhish. We have high expectations that the beta will help us better understand the requirements of our user base.