
Fallax
From $40/moActively maintained
≈ 1visits/mo
Little sign of use · estimate, read Oct 14, 2026
- For
- Security and IT teams at companies on Google Workspace or Microsoft 365 that need phishing training and audit evidence
- Price
- From $40/mopricing page, read Oct 21, 2026
- Activity
- Actively maintainedrelease 7 weeks ago · site updated 2 days ago
- Used for
- Send phishing simulations from your own Google or Microsoft tenant
- Schedule simulations per person based on each one's last result
- Export timestamped per-person training records for auditors
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsfallax.io ↗
- HeadquartersGhentper Wikidata
- Certifications they stateSOC 2 · ISO 27001 · HIPAA · GDPR · PCI DSStrust center ↗
- Trust centertheir owntrust center ↗
- Data processing agreementpublishedDPA ↗
- Privacy policy updated2026-10-02privacy policy ↗
These are Fallax's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverio.fallax/fallaxverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-21
- Address to connectapp.fallax.io/mcp
- API docsfallax.io/docsthe vendor's page ↗
- MCP docsfallax.io/docs/mcpthe vendor's page ↗
- Status pagelinked from the homepagefallax.io/status ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1

Lumo by Proton
Provides encrypted email, calendar, cloud storage, password manager and VPN under one Proton account, with the Lumo chat assistant as an add-on.
3.4MActiveFree plan2014 - #2

Abnormal Security
Detects and blocks email attacks, account takeovers, and identity threats using behavioral analysis.
31kActive2018 - #3

Barndoor AI
Routes AI model and agent requests through access controls, data-loss prevention and audit logging before they reach the model.
6.5kActiveContact sales - #4

Strike Graph AI
Runs security compliance programs for SOC 2, ISO 27001 and other frameworks, collecting control evidence from connected systems for audits.
5.6kActiveFrom $21,500/yr2020 - #5

IndiciaMCP · sign-in
Runs OSINT searches across breach dumps, person records, social platforms and network infrastructure from one query, with an agent driving a browser.
2.1kActiveFrom $1 per use - #6

The Art of ServiceMCP · open
Hosts a set of compliance and business checkers that map pasted registers, schedules and policies to the regulatory clauses they touch.
1.8kActiveFrom $149/mo2000
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Fallax for?
Sign in to leave a noteWhat is Fallax?
Runs phishing simulations inside your Google Workspace or Microsoft 365 tenant, trains users who click, and exports training evidence for auditors. It is listed in the Atlas under Security.
Who is Fallax for?
Security and IT teams at companies on Google Workspace or Microsoft 365 that need phishing training and audit evidence
How much does Fallax cost?
Paid plans start at $40/mo, per Fallax's pricing page on 2026-10-21.
Do people use Fallax?
Little sign of use: ≈ 1 visits/mo · estimate, 2026-10.
Is Fallax still maintained?
Actively maintained: release 7 weeks ago · site updated 2 days ago.
Is Fallax safe?
We do not audit vendors. What Fallax publishes, read 2026-10-21: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS stated on its trust center.
Does Fallax give refunds?
In its own words (terms of service, 2026-10-21): “Fees already paid are non-refundable except where the law requires otherwise or where we terminate without cause.”
Is Fallax HIPAA compliant?
Fallax states HIPAA compliance on its security page (2026-10-21). We have not verified it.
What are alternatives to Fallax?
In Security, by use: Lumo by Proton, Abnormal Security, Barndoor AI, Strike Graph AI, Indicia, The Art of Service.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.