In short: Webroot Security Awareness Training is a phishing simulation and staff training service from Webroot, an OpenText company. It offers more than 200 phishing templates with an editor, a library of more than 120 courses including compliance topics such as GDPR, a built-in learning management system, a Reporting Center and Microsoft directory sync. It suits organisations already using Webroot endpoint protection.
Webroot and OpenText: what it means for you
Webroot is part of OpenText, and its UK pages present the product as Webroot Security Awareness Training, from Webroot, an OpenText company. Webroot's US product page now redirects to OpenText's own cybersecurity website, so you may also see the training presented under the OpenText brand. Our supplier catalogue still lists it under the Webroot name.
For existing customers the practical message is continuity: the product, its content and its console carry on, and your training records stay where they are. If you see Webroot or OpenText on a quote or invoice, ask us and we will confirm which service it refers to. We will keep you informed if anything changes in how it is licensed or managed.
It is one of the security awareness training vendors we supply, in the group of options built into a wider security platform alongside Sophos Phish Threat, Acronis and Guardz.
What it includes
- Phishing simulation with a large library of templates adapted from real-world attacks (Webroot cites more than 200) and a built-in editor to adapt lures or build your own
- Targeted follow-up: simulation results show who needs more practice, so follow-up campaigns can focus on them
- A broad course library: Webroot describes more than 120 courses, including more than 85 micro-learning modules that can be completed in ten minutes or less
- Regular updates: Webroot says new content is added at least monthly
- Compliance courses covering regulations such as GDPR, PCI DSS and HIPAA, included in the course library rather than sold separately
- Multiple media formats: infographics, posters and videos to keep awareness visible between courses
- Campaign tools: a campaign management wizard, contact manager and a built-in learning management system that tracks participation and sends automatic reminders
- Reporting Center: activity reports showing progress and risk score that you can share with management
- Directory integration: Webroot's Microsoft Azure AD app (Azure AD is now called Microsoft Entra ID) links your directory for automatic onboarding of new starters and removal of leavers
How it fits with Webroot endpoint and DNS protection
Webroot Security Awareness Training is part of the same Webroot business range as Webroot Business Endpoint Protection and Webroot DNS Protection, and it is added to an existing Webroot business account. For organisations already on Webroot, that means one supplier for the technical and human sides of security, with training managed alongside the other Webroot services we look after for you.
The combination is logical. DNS and endpoint protection block many malicious links and downloads, but not every attack is technical. Training covers what technology misses: convincing business email compromise, fake invoices and social engineering. For the wider picture, see ransomware awareness training.
Who it suits, and when to look elsewhere
Webroot Security Awareness Training suits you when:
- You already use Webroot endpoint or DNS protection and want training from the same supplier
- You want a large, regularly refreshed library with compliance courses included
- You want to customise phishing lures with an editor rather than rely on fixed templates
Consider another option when:
- You do not use Webroot endpoint protection. Through us, the training is added to a Webroot Business Endpoint Protection account, so a standalone platform such as usecure may be simpler
- You want fully automated campaigns with minimal set-up. Compare HacWare or usecure
- You want training driven by your email security vendor. See the email security options in the platforms compared table
- You have Microsoft 365 E5 and could use Attack Simulation Training
Not sure? Our checklist for choosing security awareness training software walks through the questions to ask.
Licensing in general terms
Webroot Security Awareness Training is licensed per seat and supplied through IT providers. Through Forever Systems it is added to an account with Webroot Business Endpoint Protection and billed monthly, with seats adjusted as people join and leave. Webroot also offers a 30-day free trial, which we can set up for you. Licensing detail is on softwarelicensing.uk. Pricing depends on numbers and term, so ask us for a quote.
How we help
For existing Webroot customers, we add training to your account, connect it to Microsoft Entra ID for automatic enrolment, and set up a year-round programme. For new customers, we check first whether Webroot is the best fit or whether another platform suits you better.
- Review your current Webroot services and user list
- Set up directory sync, groups and allow-listing for simulations
- Run a baseline phishing campaign to measure where you start
- Schedule courses, compliance modules and regular simulations
- Share Reporting Center results with your board, auditors and insurer
We can also run it end to end as managed security awareness training.
Contact us to add awareness training to your Webroot services.
How Forever Systems runs your awareness programme
We are vendor-independent. We compare the security awareness and phishing simulation platforms that suit your size, sector, Microsoft 365 licensing and existing security tools, recommend one, then run it for you so training and phishing tests actually happen month after month.
- Baseline phishing simulation to see where you start
- Platform selection and set-up, with single sign-on and automatic user sync from Microsoft Entra ID or Google Workspace where the platform supports it
- A year-round plan of short training modules, simulated phishing campaigns and policy sign-off, including new-starter induction
- Sector and role content for schools, charities, healthcare, legal, finance, public sector and high-risk roles such as finance teams and help desks
- Reporting for the board, auditors, insurers and Cyber Essentials, showing completion, reporting and click trends
- Joined-up defences: email security, MFA, endpoint protection and dark web monitoring so training is backed by technology
Forever Systems Ltd provides IT and cyber security services to UK organisations. Pricing depends on user numbers and platform, so ask us for a quote.
Want help choosing and running security awareness training?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Webroot Security Awareness Training now OpenText?
Webroot is an OpenText company, and Webroot's US product page now redirects to OpenText's cybersecurity website. Webroot's UK pages and our supplier catalogue still use the Webroot Security Awareness Training name, and the service continues.
Does Webroot Security Awareness Training include phishing simulation?
Yes. It includes phishing simulation with a library of templates adapted from real-world attacks and an editor for building or adapting lures, plus targeted follow-up campaigns.
Does Webroot security awareness training include GDPR courses?
Yes. Webroot lists compliance training for regulations including GDPR, PCI DSS and HIPAA, included in its course library.
Can Webroot Security Awareness Training sync with Microsoft 365 users?
Yes. Webroot provides an Azure AD app (Azure AD is now Microsoft Entra ID) that links your directory for automatic onboarding of new starters and removal of leavers.
Do I need Webroot endpoint protection to use it?
Through Forever Systems, yes: Webroot Security Awareness Training is added to an account with Webroot Business Endpoint Protection. If you do not use Webroot, we will recommend a standalone platform instead.