Directory CybersecuritySecurity Awareness & Human RiskHoxhunt

Hoxhunt

About Hoxhunt

Hoxhunt's platform automates security awareness and phishing training tasks. It delivers phishing simulations across multiple channels using AI to mimic real-world attacks. It automates security operations tasks including detection and categorization of incidents.

Used for

Resolving false-positive reports and categorizing security incidents

From Hoxhunt's own website, read 2026-10-23. How we build listings.

How to evaluate Security Awareness & Human Risk

This is how the CIOPages Research Team evaluates this category. It is not an assessment of Hoxhunt. It comes from our Security Awareness Training buyer guide.

25%

Risk Measurement & Behavior Change

Per-user and per-group risk scoring with a transparent, explainable model; ability to track repeat clickers and high-risk roles; reporting rate and time-to-report as first-class metrics, not just completion and click rate; evidence the score reflects real exposure, not simulation history alone

20%

Phishing Simulation Realism & AI

AI-personalized and AI-generated lures that mirror current threats; difficulty that adapts per user; coverage beyond email (Teams, Slack, SMS/smishing, QR/quishing, callback); localized templates; ability to mirror attacks your email gateway actually blocked

18%

Content Library & Localization

Breadth and freshness of modules (phishing, AI threats, deepfakes, privacy, role-specific); engagement quality and micro-learning length; number of languages and true localization vs. machine translation; just-in-time / point-of-failure nudges vs. annual modules; SCORM/AICC export for your LMS

17%

Telemetry & Ecosystem Integration

Signal ingestion from email security (Microsoft, Proofpoint, Mimecast, Abnormal) and IdP (Entra ID, Okta) to inform risk; reported-phish routing into SIEM/SOAR and incident response; HRIS/AD sync for accurate org and role mapping; outbound API and webhooks for your data warehouse

12%

Program Administration & Reporting

Automation of campaign scheduling and targeting (set-and-forget vs. manual build); board- and audit-ready reporting; multi-tenant and delegated admin for global or MSP rollouts; admin effort to run the program day to day

Security, Privacy & Compliance

SOC 2 Type II / ISO 27001; data residency and GDPR posture for employee PII and behavioral data; works-council and privacy constraints on per-user scoring; coverage of mandated training frameworks (HIPAA, PCI DSS, NIST, ISO) for audit

Other Security Awareness & Human Risk Vendors

View all

KnowBe4

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .