In short: Security awareness training vendors fall into four groups: standalone platforms such as usecure, HacWare and Breach Secure Now; training built into email security from Microsoft, Check Point, Hornetsecurity, IRONSCALES and Proofpoint Essentials; training inside wider platforms from Sophos, Acronis, Guardz and Webroot; and expert-led exercises such as Bitdefender's Phishing Simulation Service.
How to use this vendors hub
Every platform here can send simulated phishing emails and assign short training. What separates them is everything around that core: where you manage it, what it plugs into, how much it runs itself, and what else comes in the same console.
The quickest way to narrow the field is to start with what you already have:
- Already on Microsoft 365 E5 or Defender for Office 365 Plan 2? You may already own Attack Simulation Training.
- Already protecting email with a security vendor? Its own awareness add-on keeps reporting and threat data in one place.
- Already running Sophos, Acronis or Webroot for endpoints or backup? Adding their training avoids another console.
- Starting from scratch, or want the deepest automation? Look first at the standalone platforms.
Then compare the shortlist side by side in our security awareness training platforms compared table, and read our buyer's checklist for choosing security awareness training software.
Standalone security awareness training platforms
These vendors focus on the human side of security. They tend to offer the most automation (automatic enrolment from your directory, self-running phishing campaigns) and extras such as policy sign-off or dark web checks.
- usecure: a UK (Manchester) human risk management platform with five products: uLearn training, uPhish simulation, uPolicy policy management, uBreach breach monitoring and uHealth human risk intelligence. Syncs users from Microsoft 365 or Google Workspace.
- HacWare: fully automated AI phishing simulation with micro-training videos of up to three minutes, each followed by a one-question quiz. Content in English and Spanish, and a choice of plans.
- Breach Secure Now: sold only through IT providers. Its Breach Prevention Platform combines weekly bite-sized training, phishing simulations, dark web checks, a risk assessment, policies with e-signature and an employee portal.
Security awareness training built into email security
If your email security vendor also runs your awareness training, the same company that sees the phishing reaching your organisation can shape the simulations and training your people receive.
- Microsoft Defender for Office 365 Attack Simulation Training: included with Microsoft 365 E5 or Defender for Office 365 Plan 2, managed in the Microsoft Defender portal. See licensing, set-up and alternatives.
- Check Point Harmony Email & Collaboration security awareness training: an add-on to Check Point's email security that uses generative AI to model simulations on the attacks actually aimed at your organisation.
- Hornetsecurity Security Awareness Service: Hornetsecurity, now part of Proofpoint, pairs a Spear Phishing Engine with an Awareness Engine and its Employee Security Index.
- IRONSCALES Security Awareness Training: training and phishing simulation testing alongside IRONSCALES email security for Microsoft 365 and Google Workspace.
- Proofpoint Essentials Security Awareness Training: an add-on to any Proofpoint Essentials email package, with Very Attacked People reporting.
Weighing up the two Proofpoint businesses? Read Hornetsecurity vs Proofpoint Essentials.
Security awareness training inside a wider security platform
These options suit organisations that already use the vendor for endpoint protection, backup or general security, and want training in the same place.
- Sophos Phish Threat: phishing simulation and training managed in Sophos Fusion (the console formerly called Sophos Central) alongside other Sophos products, with links to Sophos Email for targeted training.
- Acronis Security Awareness Training: Acronis Security Awareness Training powered by Wizer, switched on as an Advanced Pack in the Acronis console.
- Guardz: an AI-driven security platform for small businesses with built-in training and phishing simulation. Forever Systems runs Guardz for you as a managed service.
- Webroot Security Awareness Training: from Webroot, an OpenText company, and now also sold as OpenText Core Security Awareness Training. It suits organisations already using Webroot endpoint or DNS protection.
Consultant-led phishing exercises
Not every organisation wants another subscription. Sometimes the need is a one-off, expert-designed test: a spear phishing exercise aimed at the board, or an organisation-wide drill before an audit.
- Bitdefender Phishing Simulation Service: part of Bitdefender's Offensive Services, alongside penetration testing and red teaming. Consultants design tailored campaigns and deliver executive and technical reports, with optional follow-up lessons through a learning management system (LMS).
A consultant-led exercise works well alongside a self-running platform: one gives you a deep snapshot, the other keeps habits fresh all year.
How we help you choose and run a platform
We do not push one brand. We look at your licences, email platform, existing security tools, size, sector and how much time you have, then recommend the option that fits. After that we can run it for you as managed security awareness training: a baseline test, a twelve-month schedule, new starters added, and reports for your board and insurer.
Pricing depends on user numbers, term and bundling, so ask us for a quote. See what drives security awareness training cost.
Contact us to talk through your shortlist.
Every vendor page
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Which security awareness training vendor is best?
There is no single best vendor. The right choice depends on what you already own (Microsoft 365 E5, an email security product, an endpoint or backup platform), how much automation you want and what else you need, such as policy sign-off or dark web checks. We compare the options we supply and recommend one that fits.
Do you supply platforms that are not listed here?
No. We only list vendors we can supply and support. If you are currently using a different platform, we can review it against these options and help you plan a move if one of them suits you better.
Can we use the training that comes with our email security?
Often, yes. Microsoft, Check Point, Hornetsecurity, IRONSCALES and Proofpoint Essentials all offer awareness training alongside their email security. It keeps reporting in one console, although standalone platforms can offer more automation and extras.
Is security awareness training priced per user?
Most of the platforms we supply are licensed per user, on monthly or annual terms, and some are included in wider bundles. We do not publish prices, so ask us for a quote based on your user numbers.