AfriPhish

AfriPhish is a human risk management web platform for organisations that want to measure and reduce phishing and social-engineering risk through simulations, training, coaching, and audit-ready reporting.

Key capabilities include:

• Email phishing simulations with localized scenario families (for example mobile money, banking, telecom, government and tax, courier and delivery, HR and payroll) plus branded templates and landing pages, recurring campaign series, and metrics such as opens, clicks, and reports.
• WhatsApp smishing campaigns alongside email, including an option to run campaigns from an organisation’s verified WhatsApp Business number and send companion nudges.
• Security awareness training with narrated micro-courses, plus a dedicated IT/SecOps course track; the platform supports English, French, and Arabic (including right-to-left Arabic).
• Human risk scoring, real-time coaching, and governance with per-person risk scores, automated coaching after risky behaviour, policy management with versioned e-signatures and a signer roster, plus compliance-oriented analytics and exports.

Available on Web; REST API access is included on Pro plans and above (API reference: https://afriphish.com/docs/api-reference).

It primarily serves B2B security, IT, and compliance teams running organisation-wide awareness programmes.

What makes it notable in an African market context is its focus on region-relevant lures and compliance mappings for African data-protection laws and widely used frameworks, including POPIA (South Africa), NDPA (Nigeria), Kenya DPA, Ghana PDPA, Rwanda CDPA, Morocco 09-08, Egypt PDPL, plus ISO 27001, NIST CSF, SOC 2, and PCI DSS.