We use cookies on this site to help provide the best possible online experience. By using this site you agree to our use of cookies.
Click to view our cookie policy and customize your cookie preferences.
Boxphish is a UK-based cybersecurity awareness platform that helps institutions train employees to identify and respond to phishing and other cyber threats. It offers automated phishing simulations, bite-sized training modules, dark web scanning, and detailed reporting to reduce human error and strengthen security posture.
Simple subscription model, Jisc discounted rate
Pricing per staff member per year, students available as a heavily reduced bolt-on
Fixed pricing for 3 year terms
Custom branding and content available
Pay annually or upfront
NCSC Accredited content
Agreement start: 20 August 2025
Agreement end: 19 August 2028
Subsequent invoice date: The subsequent invoice will be 3 months in advance of the start date of the licence
Institutions may participate in the Agreement at any time during its life, but shall be bound by its Terms and Conditions, including payments, until the end of their 3 year term.
Higher and Further Education and Research Councils in the United Kingdom, and Universities and Colleges of Further Education in the Republic of Ireland. Other organisations supporting education, including research bodies and the public sector, may ask to participate in the Agreement. Chest will liaise with the Supplier about any such requests.
This content is restricted to logged in members.
Product demonstrations and sales support are available. Please contact help@chest.ac.uk for further information.
Boxphish User Guide - User Guide - Boxphish Knowledge Base
Upon purchase of a Boxphish subscription, typically a 45 minute onboarding call is required between the institution and Boxphish Customer Success team. This allows Boxphish to support with technical enablement and connection to Active Directory (or alternative) for automated user management.
Once onboarded, quarterly check in’s with Customer Success Team will be implemented.
Support will be provided by a dedicated Customer Success Manager. If you have not been allocated a Customer Success Manager you can contact Support via:
The Cyber Security Awareness Training Platform Made For Busy IT Teams | Boxphish
As a SAAS based platform, continuous features and updates are released and distributed to all clients periodically throughout the term of the contract.
Boxphish has two delivery methods. The primary and most common method is cloud based, online portal & dashboard hosted by Boxphish and accessed via the internet. If the customer has an LMS system and wants to host Boxphish content within this tool, then SCORM files of the modules are available to facilitate this.
Licensor: Boxphish Ltd. 8 Park Row, Leeds, LS1 5HD. Company No. 11458830.
The Chest Order, together with the Licence Terms and Conditions, and any exceptions listed below, create a legally binding contract between your institution, organisation or company and the Licensor. Therefore please read the terms and conditions carefully and only submit a Chest Order if its terms and conditions are acceptable to your institution, organisation or company and you have the authority to make the financial commitment shown.
This licence is subject to the terms and conditions for the Standard Software as a Service (SaaS) Licence (July 2024).
Chest is an Enterprise of Jisc. All Purchase orders must be made out to Jisc Services Ltd, 4 Portwall Lane, Bristol, BS1 6NB to cover all charges plus VAT. Payments are due within thirty days of the invoice date; recipients of late payments are entitled to interest in accordance with UK statutory provisions.
On receipt of a completed Order, and a Purchase Order (if required by the Institution) made payable to Jisc, Institutions will be invoiced depending on the licence and payment term selected. Invoices are payable within 30 days of the date of the invoice.
All purchases - annual payment option, they will be invoiced for year one immediately, with invoices for subsequent years to follow approximately three months prior to the licence anniversary date.
At the end of a Licence period the access to the software will be removed unless a further renewal is agreed.
The product may be used by any Authorised User of the Licensee for Educational Purposes which includes the administration and management of the licensee’s educational and research operations. These permissions are described in the terms and conditions for the Standard Chest Licence for Software.
| Students | Optional |
| Academic Staff | Yes |
| Non-Academic Staff | Yes |
| Administration and management | Yes |
| Staff home use rights | No |
| Student home use rights | No |
| Installation on Hosted Server | No |
Join our mailing list for the latest news, event information and resources