Top Free Security Awareness Training Software - Page 4

iluminr

iluminr is a Microsimulation platform that helps organizations build real-world readiness for operational resilience, cybersecurity, physical security, crisis response, and digital risk. Instead of relying on infrequent tabletop exercises or static plans, iluminr enables teams to practice decision-making through short, live simulations that reflect real risks, real roles, and real constraints. These simulations are designed to reveal how people actually respond - where coordination breaks down, where decisions stall, and where capability already exists. iluminr is used to: Move from annual or ad hoc tabletop exercises to a regular cadence of practice Build security awareness and critical response muscle memory Surface gaps between policy and real response capability Engage frontline teams, leaders, and executives in the same resilience-building loop The platform supports role-based participation, outcome-focused insights, and repeatable scenarios that scale across teams and regions. Customers use iluminr to strengthen confidence, coordination, and decision quality before a real incident puts those capabilities to the test. iluminr is particularly well suited for organizations in financial services, insurance, healthcare, critical infrastructure, and government, where resilience depends on people making the right calls when conditions are uncertain.

Average Rating: 4.8/5.0

Total Reviews: 6

Wizer

Wizer is security awareness training trusted by 20,000+ organizations, built to be the training employees actually complete, and the platform admins can actually manage. The Free Plan gives any organization instant access to bite-sized video training, quizzes, and progress reporting. No credit card. No seat minimum. No time limit. The Boost Plan unlocks the full library: phishing simulations, deepfake awareness, interactive exercises, compliance-specific courses (HIPAA, SOC 2, GDPR, PCI DSS, NIS2, ISO 27001, CMMC, and more), and WizerAI Studio, which turns any internal policy or topic into a custom training video in minutes. Content is available in 19+ languages, SCORM compliant, and integrates with your existing LMS. The platform for MSPs is a purpose-built multi-tenant portal with everything needed to run training as a managed service: per-client dashboards, white-label and co-branded training, client-level reporting, and billing management, all from one place.

Average Rating: 4.5/5.0

Total Reviews: 4

Cyberly.ai

Everything you need to protect employees — all in one platform. Cyberly is a next-generation human risk management and deepfake simulation platform built to protect organizations from AI-powered cyber threats — including deepfakes, vishing, smishing, spear phishing, and executive impersonation attacks. Unlike traditional security awareness training (SAT) platforms, Cyberly combines real-time risk scoring, multichannel phishing simulations, deepfake voice simulations, and AI-adaptive training courses to reduce human risk — at the moment it matters most: during the attack. ✅ AI-Driven, Multichannel Phishing Simulations Continuously prepare your team for advanced threats with user-adaptive simulations across SMS, email, and voice. ✅ Just-in-Time Security Awareness training Build a strong security culture with hyper-personalized training modules based on company OSINT. Customize content or generate training with AI in seconds, and deliver it via Slack, Microsoft Teams, or Google Chat. ✅ Deepfake Simulations Run advanced simulations using cloned executive voices and synthetic audio to mimic real-world threats like CEO fraud and business email compromise (BEC). ✅ Advanced Threat Management Defend against sophisticated inbound threats with Cyberly Cloud Email Security. From suspicious domains to leaked data, our Gmail and Outlook plugin instantly flags red-alerts and stops attacks before they spread. ✅ OSINT-Based Personalization Cyberly analyzes publicly available information (OSINT) — such as exposed credentials, social media profiles, and leaked data — to tailor simulations and training to each employee’s real-world risk profile. ✅ Live Breach Exposure Alerts Cyberly continuously monitors for exposed credentials and notifies affected employees — shrinking your risk window and allowing you to act before attackers do. ✅ Gamified Engagement Employees earn badges, stars, and rewards to boost engagement. All training is mobile-friendly, so your workforce can learn anytime, anywhere.

Average Rating: 5.0/5.0

Total Reviews: 3

Awaretrain

At Awaretrain, our mission is to help organisations build security-aware cultures in a fun, engaging way. Our intuitive plug-and-play security awareness platform reduces the risk of data breaches and incidents caused by employees. With engaging content, bite-sized security snacks, and interactive games, you can easily train your entire organisation and foster safe behaviour. Design training programmes and phishing simulations that perfectly fit your organisation’s needs, and effortlessly engage your colleagues in 9 native languages. Awaretrain empowers everyone to recognise risks quickly, keeping your organisation in control of the human aspect of information security. Join over 1,000 organisations and activate your human firewall today!

Average Rating: 4.5/5.0

Total Reviews: 2

Hunto AI

Hunto AI is an agentic, 100% autonomous platform purpose-built for monitoring and quantifying your external threats. We proactively monitor external assets, detect real-world brand impersonation and fraud infrastructure, and execute rapid takedowns, while mapping every finding to audit-ready proof. - CTOs get measurable breach-probability reduction and time-to-mitigation SLAs. - CEOs/CMOs get brand-abuse suppression and revenue protection. - Compliance gets reports your auditors actually accept. Hunto AI offers a live, quantified view of exposure, external risk, and the fastest path to fix.

Average Rating: 4.8/5.0

Total Reviews: 16

SimplyPhish

SimplyPhish is an EU hosted phishing simulation platform built for organisations that want to strengthen security awareness without dealing with the common barriers of traditional tools. Many companies recognise that phishing is one of the most frequent and successful attack methods, yet they hesitate to run simulations because existing platforms are too expensive, too complex or require a long and frustrating onboarding process. SimplyPhish was created to solve exactly these problems by offering a clean, straightforward and affordable way to launch realistic phishing tests in just a few minutes. The platform focuses on clarity and accessibility. Instead of overwhelming users with dozens of configuration steps, SimplyPhish provides an intuitive workflow that makes it possible for security teams, IT administrators and consultants to set up campaigns quickly and confidently. Templates for emails and landing pages can be used as provided or fully customised to match an organisation’s branding and real world phishing scenarios. For teams that want maximum flexibility, the template editor allows complete creative control. One of the key challenges organisations face is understanding how employees actually react to suspicious messages. SimplyPhish addresses this by offering real time analytics and advanced reporting that make results easy to interpret. You can instantly see who opened an email, who clicked and who submitted information, helping you identify behavioural patterns and areas where training is needed. Instead of long reports or hard to interpret dashboards, the platform delivers clear insights that support actionable decisions. Another major pain point is cost. Traditional phishing tools often require annual contracts, large upfront payments or feature tiers that lock essential functions behind higher priced plans. SimplyPhish avoids all of this with a transparent credit based model that works for both small organizations and consultants with many clients. Monthly plans offer generous credit packages at a low cost, and one time credits can be purchased without any subscription. Regardless of plan size, every user gets complete access to all features with no hidden upgrades. With SimplyPhish, organisations finally have a phishing simulator that removes barriers, reduces cost and delivers meaningful insight into human risk; all while ensuring full EU data hosting and compliance. Main advantages: - Removes complexity with an intuitive workflow that lets users launch campaigns within minutes - Reduces cost through a simple credit based pricing model with no feature limitations - Provides clear insight into real user behavior through real time analytics and advanced reporting - Avoids long onboarding processes and overwhelming feature sets common in traditional platforms - Ensures data protection and trust with full hosting and processing inside the European Union

Average Rating: 5.0/5.0

Total Reviews: 2

Bharat Security Awareness Training

BharatSec Security Awareness Training helps Indian startups and SMEs reduce human risk - the cause of most security incidents. We deliver short, practical training sessions designed for non-technical teams as well as staff who handle customer data, payments, or internal systems. Content is plain-language, India-relevant, and focused on real behaviors: spotting phishing, using passwords and MFA safely, handling sensitive data, and reporting incidents quickly. What you get: • Phishing awareness and simulation-ready content • Password, MFA, and account security basics • Data protection and DPDP-oriented hygiene • Safe remote work and device practices • Short quizzes / checks to reinforce learning • Optional completion records for client or audit requests Ideal for companies that need affordable awareness training before client security reviews, compliance steps, or after onboarding new staff - without enterprise complexity or cost. BharatSec - practical cybersecurity for growing Indian companies.

Average Rating: 4.0/5.0

Total Reviews: 1

CyberPilot

Security Awareness Training, Phishing Simulations and Security Culture measurements that actually change behaviour. We help SME's with lowering click rates and increasing report rates in phishing emails. While also not forgetting normal cyber security habits. We make sure, that you as an IT manager always know where you should focus your energy as we seek input from your users through anonymous surveys. It simple, easy to administer and users actually like it. Not just boring courses. End users rate our courses 4,5 / 5. IT managers rate us 9 / 10 We have +1000 customers and most of them stay with us for years.

Average Rating: 5.0/5.0

Total Reviews: 1

CybSafe

“Risk reduction.” The ultimate goal of security awareness professionals. It’s a simple answer, but the practice isn’t as straightforward. Compliance-driven training has become the industry norm. Indeed, this ineffective training has influenced the belief that people are “the weakest link”. Today, many security awareness professionals are coming to terms with the fact people aren’t the problem: Traditional security awareness training and human risk management approaches are. We set out to solve that. CybSafe is the human risk management platform built for purpose. It’s powered by the world’s most comprehensive security behaviors database, SebDB. It’s built by an industry-leading team of scientists, analysts, and security specialists. And it’s designed to influence security behaviors, long term. It’s risk reduction you can measure, prove, and repeat. Finally.

Average Rating: 5.0/5.0

Total Reviews: 1

Holm Security VMP

Holm Security’s unified platform delivers continuous, automated visibility and protection across millions of critical assets through a single unified platform - with one workflow and risk model. Our all-in-one platform provides a market-leading combination of Attack Surface Management (ASM) and vulnerability & exposure management, creating an efficient, proactive cyber defense. Use this platform to automatically identify new assets, monitor asset changes, eliminate blind spots, detect shadow IT, and find vulnerabilities. Holm Security’s platform is developed in Europe and delivered from European data centers, ensuring that sensitive data remains within the EU. Our European foundation reflects a strong commitment to data sovereignty, compliance, and secure development practices, providing organizations with a trusted and reliable framework for protecting critical assets.

Average Rating: 2.5/5.0

Total Reviews: 2

LYR8

LYR8 is a security awareness platform that empowers organisations with essential cybersecurity skills through courses, online simulators, and simulated attacks via email, websites, fake WiFi access points, and USB-HID devices. LYR8 enables centralized management of employee training and testing, offering the ability to customize attack scenarios and access detailed reports. With LYR8, organizations turn security culture into a proactive advantage. The platform accelerates training, centralizes data, and empowers clients to stay ahead of threats, building a stronger, more resilient security posture. Features: Up-to-Date Practical Security Training LYR8 helps clients’ IT security teams assign regular training to employees and track learning progress on key topics affecting the organization’s security readiness. Enterprise-level Scalability and Management The LYR8 architecture scales to support over 100,000 end users in service provider infrastructures. It allows companies with separate networks and large, geographically distributed infrastructures to connect up to 35,000 end users. Comprehensive LMS Capabilities LYR8 is a complete Learning Management System that allows partners help their clients upload custom and third-party courses. It integrates with external systems like Moodle and iSpring, and connects with corporate Learning and HR portals, enabling seamless user feedback and rewards. Extensive Range of Simulated Attacks LYR8 offers clients a wide range of simulated email attacks, directing users to simulated phishing sites and including attachments (Word, Excel, PPTX, etc.), links, and QR codes. Attachments can also be packaged into ZIP and ISO files, allowing partners to replicate various attack scenarios. Fully Customizable Courses and Exercises LYR8 specialists can tailor simulated attack scenarios using company branding, internal corporate news, real employee names, and more. Training courses and simulators can also be customized to match the client’s identity. Integrations with Security Tools and IT Systems LYR8 enhances clients’ security by integrating with IDM/IAM, SIEM, IRP/SOAR, DLP, and other IT security systems. This provides unified access to client security data and streamlined reporting, maximizing efficiency and insights. Learn more about LYR8 at https://humanfactor.ai/LYR8.

Average Rating: 4.5/5.0

Total Reviews: 1

TrustLayer Security Awareness Training

TrustLayer Security Awareness Training is part of our Users layer which delivers short, focused awareness training straight to inboxes and browsers, with phishing simulations that look like this year's attacks. Courses include safe use of AI tools, so the policy you set in Browse is backed by people who understand it. High-risk users are targeted automatically, and you can build training paths by topic, schedule, risk or role. Dashboards show training performance, risk scores and click rates in real time. Instant Microsoft 365 integration and SSO support mean you can be live in minutes. It's sold through BT, MSPs and resellers.

Average Rating: 5.0/5.0

Total Reviews: 1

ZULA Gamified Cybersecurity Awareness Training

ZULA is a cyberattack simulation and gamified cybersecurity training platform for collaborators and employees of any organization that allows you to measure the risk of your users and train them in a fun way from a single place. -> Tutorial videos, games and trivia -> Simulation of phishing, vishing and smishing -> Sending newsletters -> Ranking of individual and team competitions -> And more!

Average Rating: 4.5/5.0

Total Reviews: 1

Callstrike

Callstrike is a deepfake attack simulation and training platform for enterprises. It tests how employees respond to AI-generated impersonation attacks across voice calls, video conferences and messaging apps. Security teams can run AI vishing campaigns, carry out real-time voice impersonation for red team exercises, create deepfake videos for training scenarios, and join live Zoom, Google Meet and Microsoft Teams calls using face and voice swapping. The platform also supports WhatsApp spear vishing and voice cloning from short audio samples. Adaptive training then adjusts to each employee's results, helping organisations find weak points and track improvement over time.

CanIPhish

Train your users and reduce their phish click risk by up to 90% with an easy-to-use market-leading platform. Our platform does this by utilising real-world techniques and phishing material to phish and train users. We track all interactions from emails viewed, to payloads clicked to credentials and endpoints compromised. We allow you to then identify which users are prone to phishing material and target them for future training. We use a modern approach to combat a modern threat.