Cofense PhishMe

Cofense PhishMe enables organizations to improve employee resiliency to phishing attacks through real-life simulated phishing scenarios.

AuthorizedModerate8 federal agency authorizations

Visit government offering How to buy

FedRAMPAuthorizedAgency path · Feb 12, 2021 ⓘ

FedRAMP impact levelModerateGovernment Community Cloud

Runs onAWS GovCloudFedRAMP record

Agency authorizations8ATO or reuse on record ⓘ

Source: FedRAMP Marketplace · refreshed Oct 7, 2026 · How the data works

How to buy

Confirmed paths come from GSA and the FedRAMP record; searches are places to look.

Confirmed buying paths

Vendor directGovernment sales page from the FedRAMP record
Visit →

Other places to check

AWS MarketplaceExact listing not yet verified by FedCatalog · Search listings; GovCloud (US) availability is shown on each listing
Search AWS Marketplace →
Azure MarketplaceExact listing not yet verified by FedCatalog · Search listings; Azure Government editions are listed separately
Search Azure Marketplace →
Google Cloud MarketplaceExact listing not yet verified by FedCatalog · Search listings
Search Google Cloud Marketplace →
Oracle Cloud MarketplaceExact listing not yet verified by FedCatalog · Browse listings
Open Oracle Cloud Marketplace →
GSA eLibraryExact listing not yet verified by FedCatalog · MAS contract holders that list the vendor
Search GSA eLibrary →
GSA AdvantageExact listing not yet verified by FedCatalog · Products and prices on GSA schedules
Search GSA Advantage →
NASA SEWPExact listing not yet verified by FedCatalog · Provider and contract-holder lookup
Open NASA SEWP →

✓ verified by FedCatalog · ○ vendor-supplied and reviewed · searches are places to look, not matches. FedCatalog shows what it can verify and labels what it can’t. Sell this to government? Send exact marketplace, GSA or SEWP listings to mark@fedcatalog.com.

FedRAMP Marketplace listing ↗ · Section 508 ACR Repository ↗ · SAM.gov ↗

Government footprint

8 agencies have an authorization or reuse on record for this offering.

Alcohol and Tobacco Tax and Trade Bureau Department of Education Department of Health and Human Services Federal Deposit Insurance Corporation General Services Administration Immigration and Customs Enforcement Social Security Administration Surface Transportation Board

What it does

Cofense PhishMe enables organizations to improve employee resiliency to phishing attacks through real-life simulated phishing scenarios. Thousands of the world's largest organizations in both public and private sector rely on PhishMe to condition employees to recognize and report phishing attacks. PhishMe enables trained awareness and compliance personnel to run simulated attacks using email templates that look like actual phishing attacks and includes on-the-spot educational content that displays when recipients click on one of the simulated phishing emails. For example, a scenario email might alert recipients that their (e.g. banking) credentials were compromised and ask the recipients to

Cybersecurity & Risk Management Education & Training

Authorization details

Offering: Cofense PhishMeFedRAMP ID FR2013059515
Status: FedRAMP AuthorizedAgency authorization path · authorized Feb 12, 2021
FedRAMP impact level: ModerateAuthorized against the FedRAMP Moderate baseline, the most common one.
Deployment: Government Community CloudSaaS
Runs on: AWS GovCloudFrom FedRAMP leveraged-system relationships.
Assessor (3PAO): Coalfire Systems, Inc.
Data as of: Oct 7, 2026FedRAMP Marketplace, refreshed daily

An authorization belongs to this specific offering and boundary; the vendor’s other offerings are listed separately. Source: FedRAMP Marketplace · refreshed Oct 7, 2026.