In short: Proofpoint Essentials Security Awareness Training is an add-on to any Proofpoint Essentials email security package. It sends phishing simulations based on real threats, teaches people at the moment they click, assigns modules from a training library and uses Very Attacked People reporting to show which users attackers target most.
What it is
Proofpoint Essentials is Proofpoint's cloud email security service for small and mid-sized organisations. It filters spam, phishing and malware before messages reach the inbox, and higher packages add encryption, data loss prevention, continuity and archiving.
Security Awareness Training is the optional add-on that covers the people side. Because it is run alongside the email filtering, the same team that looks after your email protection can manage the training, and the threats Proofpoint sees can inform what your people are tested on. Email filtering stops most attacks but never all of them, and the ones that get through tend to be the most convincing. Training prepares staff for exactly those messages.
If you are comparing approaches, our vendors hub groups this with other training that is built into email security.
What is included
| Element | What it does |
|---|---|
| Phishing simulations | Simulated phishing built from real-world threats, sent to everyone or chosen groups |
| Just-in-time teaching | A short teaching video shown when someone clicks a simulation, while the mistake is fresh |
| Training module library | Short training modules on core topics such as securing email and protecting passwords |
| Assignments and follow-up | Modules assigned to groups or to people who fall for a simulation |
| Very Attacked People reporting | Shows which users are targeted most by real attacks, so you can prioritise them |
| Reporting | Simulation and completion results by user and group, to track progress over time |
We confirm the current module library, languages and campaign options with you at set-up, as Proofpoint updates its content regularly.
Very Attacked People
Most awareness programmes measure who clicks. Proofpoint adds a second question: who is actually being attacked? Very Attacked People (VAP) reporting draws on the threats Proofpoint Essentials sees aimed at your organisation and highlights the users who receive the most of them.
That is useful for two reasons:
- Prioritising training: a heavily targeted person who also struggles with simulations is a far bigger risk than someone who is rarely attacked
- Choosing extra controls: the most attacked people are good candidates for stronger protections, such as phishing-resistant MFA; see password and MFA training and Cisco Duo MFA
Senior people and finance teams often appear on the list, which is why business email compromise training and board-level training matter. For how VAP compares with Hornetsecurity's benchmark, see Hornetsecurity vs Proofpoint Essentials.
Proofpoint Essentials or ZenGuide?
Proofpoint also has a separate, standalone awareness platform called Proofpoint ZenGuide, which it describes as targeted, risk-based security awareness training. It sits in Proofpoint's main product range rather than the Essentials family.
We supply the Essentials add-on, which is designed for organisations that use Proofpoint Essentials email security and want awareness training managed in the same place. Since Proofpoint completed its acquisition of Hornetsecurity in December 2025, Proofpoint also offers the Hornetsecurity Security Awareness Service, so there is more than one Proofpoint route to awareness training for smaller organisations. We can help you choose between them.
Licensing
Security Awareness Training is licensed per user as an add-on to a Proofpoint Essentials package, normally for the same users as your email package, and we supply it on monthly terms.
| Proofpoint Essentials package | Can add Security Awareness Training? |
|---|---|
| Business and Business+ | Yes |
| Advanced and Advanced+ | Yes |
| Professional and Professional+ | Yes |
Pricing depends on the package, user numbers and term, so ask us for a quote. Licensing detail is on Proofpoint Essentials Security Awareness Training licensing, and the email packages are on Proofpoint Essentials licensing.
Who it suits and how we help
Proofpoint Essentials Security Awareness Training suits organisations that:
- Already use Proofpoint Essentials for email security, or plan to
- Want one vendor and one team for email filtering and awareness
- Want to prioritise training by who is actually attacked, not just who clicks
- Have no dedicated security awareness manager and want the programme run for them
If you do not use Proofpoint Essentials, a standalone platform or the training bundled with your existing email security may be simpler; see platforms compared.
As part of our managed security awareness training service, we:
- Add Security Awareness Training to your Proofpoint Essentials account and sync your users
- Make sure simulations are delivered without weakening your filtering
- Run a baseline simulation and review your Very Attacked People
- Schedule monthly modules and quarterly simulations, with extra focus on the most attacked
- Report completion, report rates and trends to your board or insurer
Contact us for a quote or to see it running.
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is security awareness training included in Proofpoint Essentials?
No. Security Awareness Training is a separate add-on that can be added to any Proofpoint Essentials email package, including Business, Advanced and Professional and their Plus versions. It is licensed per user.
What are Very Attacked People?
Very Attacked People are the users in your organisation that Proofpoint sees being targeted most often by real attacks. Reporting on them helps you focus training and extra protection where the risk is highest.
What is the difference between Proofpoint Essentials Security Awareness Training and ZenGuide?
ZenGuide is Proofpoint's separate, standalone awareness platform, which it describes as targeted, risk-based security awareness training. The Essentials add-on is designed for smaller organisations using Proofpoint Essentials email security and is managed alongside it.
Can I buy Proofpoint Essentials Security Awareness Training without Proofpoint email security?
It is sold as an add-on to a Proofpoint Essentials package. If you use different email security, we will recommend a platform that fits it instead.
How is Proofpoint Essentials Security Awareness Training licensed?
Per user, as an add-on to your Proofpoint Essentials package, normally for the same users as your email filtering. We supply it on monthly terms. Ask us for a quote based on your user numbers.