Technical Expertise, Experience and Time

Technical Expertise

If you are a security engineer or have one in your company, you can easily spawn up a phishing server using a pre-existing phishing platform to create your campaigns.

Experience

If you don’t have any security engineers, creating your own phishing program may be out of the question.

You may have a security engineer in your organization, but they may not be experienced with social engineering or phishing tests.

If you have someone that is experienced, then they would be reliable enough to create their own phishing program.

Time

This one is a really big factor for small to mid-sized companies.

If your team is small, it might not be convenient to add another task to your security team.

It is a lot more convenient to have another experienced team do the work for you.