If the requirement is an occasional, single-channel email exercise with basic campaign events, a lightweight deployment may be enough. TaiGong earns its place when follow-up and operating controls matter.
A basic tool may fit when one operator runs occasional exercises and risk analysis, training, automation, multiple delivery channels, and governed access live elsewhere.
TaiGong connects core email simulation to risk and evidence, then adds licensed channels, stages, analytics, awareness, automation, RBAC, and auditing where required.
This table describes a typical basic GoPhish-style deployment, not every possible customization or third-party extension. Validate the current upstream project and your own integrations before making a decision.
| Requirement | Typical basic GoPhish workflow | TaiGong 1.3.4 |
|---|---|---|
| Email campaigns | Core use case. | Core Targets, groups, templates, pages, SMTP, results, and IMAP report monitoring. |
| SMS and supported enterprise IM | Usually requires external tooling or customization. | Licensed SMS plus DingTalk, Feishu, and WeCom with provider configuration. |
| Multi-stage and event automation | Usually custom or external. | Licensed Stages, time/event rules, scheduled jobs, and execution history. |
| Human-risk workflow | Usually assembled outside the campaign tool. | Core Risk signals and evidence; Licensed advanced views and exports. |
| Awareness training | Usually an external workflow. | Licensed Courses, batches, assessments, completion views, and follow-up. |
| Governed access | Depends on custom deployment and surrounding controls. | Core tenant-aware resources and API tokens; Licensed RBAC and audit console. |
| Deployment | Self-hosted. | Delivered Managed SaaS and self-hosted paths are available. |
| Slack | Depends on external integration. | Integration-only Incoming-webhook event notifications; no Slack exercise delivery. |
| Microsoft Teams delivery | Not evaluated here. | Unsupported Not a TaiGong 1.3.4 simulation-delivery channel. |
The product difference is the connected operating loop, not a claim that every feature is free or that GoPhish cannot be extended.
Build and run authorized email exercises with groups, templates, landing pages, SMTP profiles, results, reporting events, risk signals, tenant-aware resources, and API tokens.
Enable channels, stages, analytics, awareness, automation, RBAC, auditing, AI assistance, or advanced controls through the corresponding license.
Use managed SaaS when application maintenance should stay with Yofune_Labs, or self-host when infrastructure and evidence must remain customer-controlled.
Slack is notification-only. Microsoft Teams delivery and an autonomous AI Agent are not represented as delivered capabilities in the current version.
TaiGong does not claim an automatic GoPhish migration path. Evaluate fit by rebuilding one authorized workflow with equivalent targets, templates, landing pages, and sending configuration, then compare setup, evidence, reporting, and follow-up.
Bring the scenario, operating constraints, and follow-up requirements your team uses today.
