Hoxhunt
Adaptive phishing simulations and micro-training, with a focus on reporting.
Security Awareness
Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Addresses 279 stories in our coverage in the last 90 days 4 products that provide it
What it is
Short, regular training on current threats and simulated phishing that teach staff to spot and report suspicious messages, with reporting for management.
How to value it
Technology filters most attacks, but the ones that get through land with people. Frequent, relevant training turns staff into an early warning system: one quick report of a phishing email lets the security team protect everyone else. NIS2 also requires cybersecurity training for management bodies.
Questions to ask a vendor
- 1Is the content updated with current, real threats rather than generic modules?
- 2Do we measure how many people report, not just how many click?
- 3Is there training for executives and other high-risk roles?
- 4Can results serve as evidence for NIS2, DORA or ISO 27001?
For your risk register
- Risk
- Staff fall for phishing, fraud or social engineering.
- Control
- Monthly awareness training and phishing simulations with reporting metrics.
- Owner
- CISO together with HR.
- Measure
- Phishing report rate.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Huntress Managed Security Awareness Training
Security awareness training and phishing simulation, managed for you.
KnowBe4 Security Awareness Training
Training library and simulated phishing with reporting.
SoSafe Awareness Platform
Behaviour-based awareness training and phishing simulation in many languages.
Recent stories it addresses
902 stories in total- 16 Oct 2026Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Fake AI tools like Claude and ChatGPT are being used in phishing attacks against enterprise employees.
- 16 Oct 2026Claude Code Desktop Flaw Let Malicious HTML Steal Developer Credentials
Claude Code Desktop flaw allowed malicious HTML to steal developer credentials and private keys.
- 16 Oct 2026UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
APT campaign uses fake event invites to target Taiwan research affiliates with Google AitM phishing.
- 16 Oct 2026Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks
Forescout discovers new ROMULUS malware platform used in ClickFix attacks, linked to Vice Society.
- 16 Oct 2026Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
US election officials warned of sophisticated phishing and smishing attacks targeting 2026 midterms.
- 15 Oct 2026Fake Arch Linux packages push malware with root privileges
Malicious Arch Linux packages impersonating popular tools delivered malware with root privileges.
- 15 Oct 2026Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers impersonate AI products to spread malware and steal credentials.
- 15 Oct 2026Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
New Android RAT 'Hirudo' replaces banking apps with trojanized copies to steal credentials.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.