Security Awareness Training has become increasingly important over the last few years as cybercrime has exploded. A similar explosion in the security awareness industry has happened; new vendors popping up and old vendors adding Security Awareness Training capability to their portfolio.
Choosing the right Security Awareness Training vendor is an important exercise. You need to find the right type of product; one that balances cost, package scope, and meets staff needs. Our top ten list has been compiled to show you the breadth of availability in the market. It also shows you the types of offerings from these vendors to help you differentiate and choose the best service for your needs.
So, here is our top ten Security Awareness Training Companies.
NOTE: Gartner Inc. peer reviews, are real reviews of products from real users. The mark given is out of a possible 5.0 stars.
Also included are some of the top comments about each product
KnowB4
Location: USA
KnowB4’s training package is an integrated mix of security training and phishing. The emphasis is on their analytics program “Phish-prone percentage”™ which is used to feedback and optimise staff training over time.
“Love how flexible it is to train our employees, very useful and helpful”
Source: https://www.expertinsights.com
Garner Peer Review Star rating: 5.0-stars
Ironscales
Location: Israel
Ironscales provides internal classroom-based training. Ironscales also has a state-of-the-art Attack Simulation And Phishing Awareness Training platform. The Ironscales training sessions are personalised and gamified.
“IronScales has created what I feel is the best anti-phishing platform primarily due to their educational training and phishing testing built into the product.”
Garner Peer Review Star rating: 5.0-stars
The Defence Works
Location: UK
The Defence Works excels in providing interesting, collaborative, and entertaining security awareness training that employees love. Their GCHQ accredited program is of the highest standard. Their training utilises state-of-the-art techniques like gamification and scenario-based learning for optimal results.
“If you’re looking for security awareness training and simulated phishing to genuinely drive cultural change, then look no further. Simple and quick set-up, amazing content and supportive vendor (lots of free tools and content on top of what we signed up for too!).”
Source: https://www.gartner.com/reviews
Garner Peer Review Star rating: 5.0-stars
PhishLabs
Location: USA
PhishLabs offers a number of security products of which security awareness training is one. Their training packages include general security awareness as well as simulated phishing exercises. They also offer a triage service where they check any phishing emails reported by staff.
“Excellent content and engaging training modules as well as simulated alerts to enterprise users.”
Source: https://www.gartner.com/reviews
Garner Peer Review Star rating: 4.8-stars
Infosec Institute
Location: USA
Infosec Institute, offer a suite of security awareness related products, including the phishing simulation package, SecurityIQ, that can be managed and tailored to requirements by an administrator. The company offers general enterprise-grade security awareness. The company also places focus on security certification bootcamps and training for IT professionals and staff.
“Overall, I was quite impressed by the service and most importantly the impact it has had on our employees’ awareness”
Source: https://www.gartner.com/reviews
Garner Peer Review Star rating: 4.7-stars
Terranova Security
Location: Canada
Terranova offers a full security awareness training suite including phishing simulation packages. Terranova also specialise in compliance areas such as GDPR awareness training. The company emphasises the process of security awareness to encourage a company-wide culture of security.
“The training itself is great, and has been very well received across our global population.”
Source: https://www.gartner.com/reviews
Garner Peer Review Star rating: 4.6-stars
Cybrary
Location: USA
Training of IT professionals in security is a focus for Cybrary. They have a suite of certification bootcamps and other training on offer. Cybrary offer packages that help to create IT teams that have specialist security knowledge. This can then be put to good use in creating a security culture inside an organisation.
“Overall Cybrary is a very good source for knowledge in the information security world. It has a variety of topics which can be used to either gain new skill sets or to help prepare for certifications.”
Source: https://www.gartner.com/reviews
Garner Peer Review Star rating: 4.6-stars
CoFense (PhishMe)
Location: USA
PhishMe was acquired by CoFense and this now forms the main arm of CoFense’s security training package. The package is cloud-based allowing remote and multi-site access for security training and phishing simulation exercises. The CoFense ‘Reporter’ is integrated to allow users to easily report phishing emails.
“The reporting is high quality, and it’s easy to get users additional training when you can see they need it. It’s also easy to send the training out to the whole organization.”
Source: https://www.expertinsights.com
Garner Peer Review Star rating: 4.6-stars
Sophos
Location: UK
Sophos is a more generalised and very large security vendor who has added security awareness training to their portfolio. Their main product in this area is “Sophos Phish Threat” which provides cyber-attack simulation and training for end users.
“Sophos Phish Threat has been a great tool for measuring our users’ readiness to face cyber threats out in the wild.”
Source: https://www.gartner.com/reviews
Garner Peer Review Star rating: 4.4-stars
Proofpoint (formerly Wombat)
Location: USA
Proofpoint offers a wide portfolio of security products such as email encryption and spam filtering. Their security awareness offering includes phishing simulations, training modules and knowledge assessments for employees to check their understanding. They also provide a triage platform, ‘Phish Alarm’, which encourages employees to report phishing emails.
“Technical resources at Proofpoint have done above and beyond what I would have normally expected to support adoption within our organization.”
Source: https://www.gartner.com/reviews
Garner Peer Review Star rating: 4.4-stars
We hope you find this round-up of our top ten vendors a useful way to find exactly what you are looking for in a security awareness training company. It can be hard to figure out what will be the most cost-effective and successful when choosing a program. While you are looking, check out The Defence Works free content for education, information, and fun:
The Defence Works Blog: https://thedefenceworks.com/blog
Webinars for your employees: https://thedefenceworks.com/webinars/
Free phishing training video: https://youtu.be/wcXw3q91L7M
The Defence Works, said to be the world’s most interactive and engaging security awareness training.