In short: Hornetsecurity vs Proofpoint Essentials comes down to approach. Hornetsecurity's Security Awareness Service runs fully automated, graded spear phishing and needs-based e-training, measured by its Employee Security Index. Proofpoint Essentials Security Awareness Training is an add-on to Essentials email security, with simulations from real threats, just-in-time teaching and Very Attacked People reporting.
Why compare them now
Proofpoint completed its acquisition of Hornetsecurity on 8 December 2025. Hornetsecurity runs as a dedicated Proofpoint business unit focused on managed service providers and small and mid-sized businesses, and Proofpoint has said customers can expect continuity of service and support. Proofpoint's own website now also presents Hornetsecurity's 365 Total Protection under the Proofpoint name, and its Essentials product page now leads to Proofpoint 365 Total Protection. Proofpoint Essentials itself, including its awareness add-on, remains available through partners, including us.
So a smaller organisation looking at Proofpoint can now reach awareness training in two ways: the Hornetsecurity Security Awareness Service or the Proofpoint Essentials Security Awareness add-on. Both are current products and both are available from us. This page compares them as they are sold today. It does not guess at future product plans.
Side by side
| Hornetsecurity Security Awareness Service | Proofpoint Essentials Security Awareness Training | |
|---|---|---|
| How it is bought | Standalone, or included in 365 Total Protection Plan 4 (Compliance & Awareness) | Add-on to a Proofpoint Essentials email package |
| Email security pairing | Hornetsecurity 365 Total Protection or Spam and Malware Protection (optional) | Proofpoint Essentials (required) |
| Simulation approach | Spear Phishing Engine with attacks graded by attacker effort, including fake login pages and macro attachments | Simulations built from real-world threats |
| Training model | Awareness Engine: automatic, needs-based e-training, with a booster for those who need more | Just-in-time teaching on a click, plus modules from a series-based library |
| Headline measure | Employee Security Index (ESI), with history and forecast | Very Attacked People: who real attackers target most |
| Staff portal | User Panel with e-tutorials, videos, quizzes and gamification | Ask us |
| Licensing | Per user, monthly | Per user, monthly, as an Essentials add-on |
| Content languages | Multiple | Ask us |
Simulation approach
Hornetsecurity sorts its simulations into levels based on how much effort a real attacker would need, from mass phishing to messages that reference a person's role and colleagues or come from spoofed domains. Each person receives a random mix of levels at random times, and results are weighted by difficulty. Its fact sheet marks the two highest levels as planned and says they will need Hornetsecurity email filtering.
Proofpoint Essentials builds its simulations from the real threats Proofpoint sees, and teaches at the point of failure with a short just-in-time video. Administrators then assign modules from the library to groups or to people who were caught.
In practice, Hornetsecurity is the more hands-off option once it is configured, while Proofpoint Essentials gives administrators a more familiar campaign-and-module model. Our guide to phishing simulation covers the principles that apply to both.
Measurement: ESI vs Very Attacked People
The two measure different things, and both are useful:
- The Employee Security Index answers *how well do our people behave under realistic attack?* It is a single, difficulty-weighted score with history and forecast, which suits board reporting.
- Very Attacked People answers *who are attackers actually going after?* It draws on real email threats, so you can focus training and extra controls on the most targeted users.
Neither replaces the basics. Whichever you choose, track report rate, time to report and completion as well; see how to measure security awareness training effectiveness and our human risk management guide.
Which suits you
| If you… | Consider |
|---|---|
| Already use Proofpoint Essentials for email | Proofpoint Essentials Security Awareness Training, to keep one console and one team |
| Use or plan to use Hornetsecurity 365 Total Protection | The Security Awareness Service, or Plan 4, which includes it |
| Use a different email security product | The Hornetsecurity Security Awareness Service, which can be bought standalone, or another platform from our vendors hub |
| Want training to run with minimal admin | Hornetsecurity's Awareness Engine and automatic onboarding |
| Want to prioritise the most targeted people | Proofpoint Essentials with Very Attacked People reporting |
| Need a single score for the board | Hornetsecurity's ESI history and forecast |
Other routes may suit you better. Microsoft 365 E5 customers already have Attack Simulation Training, and IRONSCALES security awareness training pairs training with IRONSCALES email security for Microsoft 365 and Google Workspace. See every option on platforms compared.
How we help you choose
We supply both Hornetsecurity and Proofpoint Essentials, so we have no reason to push one over the other. We will:
- Review your current email security, Microsoft 365 licences and user numbers
- Agree what you need to report, and to whom: board, insurer, auditor or customers
- Show you both platforms, or a better-fitting alternative if there is one
- Quote both on a like-for-like basis
- Set up the chosen platform and run it as part of our managed security awareness training
Contact us for a side-by-side demonstration and quote.
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Are Hornetsecurity and Proofpoint the same company now?
Proofpoint completed its acquisition of Hornetsecurity on 8 December 2025. Hornetsecurity operates as a dedicated Proofpoint business unit focused on managed service providers and smaller businesses, and both product lines continue to be sold.
Which is better for security awareness training, Hornetsecurity or Proofpoint Essentials?
Neither is better in every case. Hornetsecurity suits organisations wanting a fully automated programme with a difficulty-weighted benchmark. Proofpoint Essentials suits organisations already on Proofpoint Essentials email security that want to prioritise their most attacked people.
Can I use Hornetsecurity awareness training with Proofpoint Essentials email security?
Yes. The Hornetsecurity Security Awareness Service can be bought on its own, so it can run alongside other email security, including Proofpoint Essentials. Its fact sheet says the most advanced planned simulation levels will need Hornetsecurity email filtering.
Do they cost the same?
They are both licensed per user, but the price depends on the package, user numbers and term. Ask us for a quote and we will compare them like for like.