Best Security Awareness Training Software - Page 11

Cybersecurity and IT Trainings

We train individuals and corporate bodies for full fledge professionals, hobbyists, and enthusiasts. No matter your level, our courses will inspire the IT genius in you and your team.

Cyber Security Awareness Training

Cybersecurity Guides & Risk Checklists

BizRiskGuide offers 9 free cybersecurity tools for startups and small businesses — including an email security checker (SPF/DKIM/DMARC), website security scanner, password breach checker, SSL certificate checker, phishing email checker, domain impersonation checker, exposed files finder, exposed secrets checker, and cyber risk quiz. Everything is free, no signup required. We also publish plain-English security guides and free downloadable templates. Learn more at https://bizriskguide.com

Cybersecurity VR Training

Effective cyber security training in VR Teach your employees that a hacker can take advantage of their inattention. Engaging Virtual Reality training will show them how a cybercriminal can fool them. What sets Company (Un)Hacked apart from other training courses? VR technology – Training is in the form of an application for virtual reality goggles Independence – the employee can train on their own Profesionalism – the program was developed in cooperation with SunCapital, which has been securing companies against cyber attacks for more than a dozen years, Entertainment and excitement – deep involvement of the employee makes him remember the training better Up-to-date – the program is kept up-to-date with the latest ways to attack Company (Un)Hacked is planned so that the employee learns more hacking techniques with each chapter. The most important goal of the training? To teach defense against attacks and understand the process of a cybercriminal.

Cyber Sqool For Schools

Cyber Sqool is a web-based digital education platform for schools. It helps teachers develop pupils’ online-safety skills and responsible digital behaviour through guided sessions, explanatory videos, interactive activities and screen-free educational games. The programme supports primary and lower-secondary education and addresses privacy, online communication, cyberbullying, scams and asking trusted adults for help. Materials support teacher facilitation and conversations between school and home, with resources available in Arabic, French and English. Schools can contact Cyber Sqool to discuss implementation and pricing.

CyWARIA Cyber Range

Cyber Security Simulation Platform. Cloud-based and fully customizable Cyber Range. Cympire significantly increases an organisation’s Cyber Resilience through continuous Training and Assessment of Security Professionals. Cympire's cloud native platform empowers clients to improve their response to real-life cyber attacks in a true to life environment replicating security architecture, network and tools.

Deepfake Detection

Breacher.ai is the leading Deepfake Testing, Detection, Awareness and Vulnerability Company with the most comprehensive solution to combat Deepfake.

Doubleflow Security Awareness

Doubleflow is a gamified cybersecurity awareness platform that turns passive compliance training into interactive, gamified experiences employees actually act on. It is the engagement layer that complements security awareness training (SAT) platforms like KnowBe4, turning passive compliance content into active, memorable experiences that change behavior. Trusted by more than 1,000 organizations and +500,000 employees worldwide, Doubleflow boasts a 97% user recommendation rate. The Ultimate Toolkit for Cybersecurity Awareness Month (October) While built for year-round security culture, Doubleflow is the premier turnkey solution for Cybersecurity Awareness Month in October. Instead of forcing employees to watch generic videos, security and L&D teams use Doubleflow to launch high-impact October campaigns, factory floor roadshows, and corporate all-hands events. It gives teams the exact tools, games, and narratives needed to drive massive engagement during the industry’s most critical awareness window. Core Product Offerings & Features: Beat the Hacker® Cybersecurity Escape Room: A premier interactive cybersecurity training game available in flexible 5, 15, and 30-minute editions to fit any corporate schedule. Interactive Gamified Training: Hands-on problem-solving and narrative-driven scenarios that ensure long-term learning retention. 1-Click Customizable Campaigns: Pre-built, industry-tailored campaign templates designed for instant deployment. Keep your traditional compliance platform to satisfy the auditors—use Doubleflow to transform your corporate security culture and turn your employees from your biggest vulnerability into your strongest line of defense.

Fake Phishing Platform

Fallax

Fallax is a phishing simulation and security awareness platform for authorised internal security testing. It connects to your Microsoft 365 or Google Workspace tenant with one admin consent, syncs your people straight from the directory, and delivers simulated phishing emails by injecting them into staff mailboxes through your own tenant. There is no sending domain to configure, no SPF/DKIM/DMARC setup, and no risk to the deliverability of the domain your real business mail depends on. Once connected, a continuous programme gives every person their own schedule of simulations, sent at a random minute inside their own working hours so colleagues cannot warn each other. Cadence and difficulty adapt to how each person handled the last one: frequent clickers are tested more often on easier lures, consistent reporters get the hardest ones less often. A monthly cap, a minimum gap between sends and a pause that drops the whole queue keep it bounded. One-off campaigns still exist for tests you want to run by hand. Opens, clicks, credential submissions and reports are tracked per person. Submitted credential values are never stored, only that a submission occurred. Anyone who falls for a simulation lands on an awareness page showing them what to look for next time, and a report mailbox credits staff who forward suspicious mail without anyone ticking a box. Every simulation lands in a per-recipient audit trail that exports as CSV or PDF evidence for ISO 27001 A.6.3, SOC 2 CC1.4 and CC2.2, NIS2 Article 21(2)(g), DORA Article 13(6), PCI DSS 12.6.3.1, HIPAA 164.308(a)(5), GDPR Article 32 and NIST CSF PR.AT-01, or syncs itself into Vanta and Drata. Other features: - App discovery: asks your tenant which applications it federates and who signs in to them, then ranks the lure gallery so the phishing template borrows a brand your staff really use - Template and landing page gallery with merge tags, inbox-row and rendered previews, and per-template click rates - People and audiences: manual add, CSV import with column mapping, directory sync, bulk actions - Domain ownership verification (SSO, DNS TXT record, or mailbox connector) that fences in which addresses a campaign may target and which senders it may present - Multi-tenant workspaces with Google and Microsoft Entra SSO - Read-only MCP server so Claude, ChatGPT or any MCP client can query a workspace's reporting - Reporting: resilience trend, engagement funnel, risk by department, per-template effectiveness

Firewall Academy

Firewall Academy provides engaging and custom-tailored security awareness training, phishing simulations, and security briefs designed to help organizations reduce human-related security risks and meet compliance requirements. Founded by industry professionals aiming to replace boring, "check-the-box" training, the academy offers high-quality, mobile-friendly content that focuses on building a "human firewall" through lasting behavior change.

Frame Security Platform

Frame is the new standard for security awareness, trusted by fast-growing AI companies, Fortune 500 companies, and leading global brands. The platform learns your organization, your people, your policies, and your threat surface, and generates personalized training and hyper-realistic simulations (phishing, voice phishing, deepfake video) in minutes, rather than pulling from a library. Everything feeds into a Human Risk Score that ties simulations, training, and security posture into one continuous view. Attackers already know your company. Your people should too.

Gordon Phishing Simulation

Gordon Phishing Simulation sends realistic, role-specific phishing emails to employees to measure susceptibility to social engineering attacks and deliver targeted training at the moment of failure. Simulations are drawn from real-world attack patterns including credential-harvesting pages, spoofed executive requests, fake invoice approvals, and MFA-bypass lures and are automatically customized by department, job role, and seniority level so each employee receives scenarios relevant to their actual work context. Template difficulty adjusts over time based on individual click history, preventing employees from pattern-recognizing simulations as fake. When an employee interacts with a simulated phishing email, they receive an immediate, non-punitive micro-lesson explaining the indicators they missed. Results are aggregated into a per-user and per-department risk score that tracks behavioral change over time, not just click rates. Administrators can run campaigns on a continuous automated schedule or configure one-off tests, with no manual intervention required between cycles. The platform integrates with Microsoft 365 and Google Workspace for directory sync and direct message injection, supports SSO via SAML, and connects to existing SIEM and ticketing tools via webhooks and API. Reports are exportable and pre-formatted to provide compliance evidence for SOC 2, ISO 27001, and NIST CSF requirements.

Gordon Security Awareness

Gordon Security Awareness delivers role-specific, short-form security training to employees on a continuous, automated schedule, combining structured learning modules with behavioural data from phishing simulations to build and track individual-level security competency. Training is assigned automatically based on each employee's role, department, and current risk score, rather than on a fixed calendar. Employees who fail a simulation receive a targeted micro-lesson on the specific technique used. Content adjusts as behaviour changes, so training stays relevant without repeating the same material at arbitrary intervals. Modules average three to five minutes and are delivered directly via email and Slack, without requiring employees to log in to a separate portal. Each employee maintains a continuously updated behavioural risk score combining training completion, simulation performance, and threat reporting activity. Administrators view individual, department, and organization-level risk trends in a single dashboard without pulling individual campaign reports. Scheduled reports are automatically formatted for both security teams and non-technical leadership. The platform syncs with Microsoft 365 and Google Workspace for directory management and SSO. Phishing simulation delivery does not depend on Direct Mail Injection. Content is available in multiple languages with regionally reviewed translations. Training outcomes map to SOC 2, ISO 27001, NIST CSF, HIPAA, and Cyber Essentials for compliance reporting.

HailBytes Security Awareness Training (SAT) Platform

HailBytes SAT is a self-hosted Security Awareness Training and phishing simulation platform built for IT and security teams that want continuous user testing without per-seat licensing or sending employee data to a third-party SaaS. The platform combines realistic phishing simulations with built-in post-click training modules and interactive quizzes, turning every simulated attack into a teachable moment. Organizations using continuous testing with targeted micro-training see successful phishing attacks drop by up to 45%. Key capabilities include unlimited campaigns with no per-user fees, AI-assisted phishing template generation, a full HTML template editor with merge variables like {{.FirstName}} and auto-injected tracking pixels, reusable credential-capture landing pages with version history, and post-click training redirects that send clickers straight into an awareness page with no third-party LMS required. Users and groups can be segmented by department, risk tier, or cohort via CSV import or manual editing. Enterprise features include role-based access control with admin, operator, and read-only roles, MFA/TOTP, SSO/OIDC and SAML authentication, custom branding, API tokens, and detailed audit logs with JSON, CSV, and Syslog export for direct SIEM integration. Any SMTP provider is supported, including AWS SES, SendGrid, Mailgun, or your own mail server, with pre-built sending profiles and an email-warming guide to maximize inbox delivery. HailBytes SAT deploys from the AWS or Azure Marketplace in under 30 minutes on a hardened image you control. Pricing starts at $0.24/vCPU/hour (roughly $4,200/year on the recommended 2 vCPU instance) with a 30-day free trial, typically 70 to 80% less than commercial alternatives like KnowBe4 or Proofpoint. Your account, your data, no vendor lock-in.