Five security awareness training platforms worth comparing for a small business are Microsoft's Attack simulation training, KnowBe4, Proofpoint ZenGuide, Hoxhunt and Huntress Managed SAT. All five send simulated phishing and assign training. They differ in the channels they simulate, how much administration they need and whether the price is published or quoted.
Disclosure: NetSys runs managed security awareness training, and our city service pages name KnowBe4 as the training platform we use. Every vendor below, KnowBe4 included, is described only from its own website, checked October 7, 2026. The table is unranked, with no scores or review ratings.
For what a program costs beyond the license, see our guide to phishing training cost. If you would rather have the program run for you, that is our security awareness training service.
What does a security awareness training platform do?
It does four jobs: sends simulated phishing to staff, assigns short training to people who click, gives everyone a button to report suspicious mail, and reports results over time. The joint CISA, NSA, FBI and MS-ISAC phishing guidance recommends regular training on spotting and reporting phishing, and encourages small businesses to use commercial phishing awareness training programs.
How do the main security awareness training platforms compare?
Facts come from each vendor's own pages, checked October 7, 2026. Features can vary by plan, so confirm the details for the tier you are quoted.
| Platform | Simulations the vendor lists | Training content | Report button | Who runs it | Pricing |
|---|---|---|---|---|---|
| Microsoft Attack simulation training | Email simulations: credential harvest, malware attachment, link in attachment, link to malware, drive-by URL and OAuth consent grant; links can be URLs or QR codes | Built-in modules delivered with Terranova Security; Microsoft's FAQ counts more than 85 | Outlook's built-in Report button | You, in the Microsoft Defender portal, with optional simulation automations | Requires Microsoft 365 E5 or Defender for Office 365 Plan 2, listed at $5.00 per user per month paid yearly (as of October 2026) |
| KnowBe4 Security Awareness Training | Unlimited simulated phishing, plus simulated vishing, callback phishing and physical QR code tests in its feature list | Foundation library of 200+ pieces of content or Advanced library of 1,000+; content in 47+ languages | Phish Alert Button for email and Teams, offered free | Your admin, with automated training campaigns and AI-selected phishing templates | Published: $1.63 to $3.75 per seat a month by tier and seat count, on a three-year term (list prices dated May 2026); quoted above 1,000 seats |
| Proofpoint ZenGuide | Phishing simulations, including templates cloned from real attacks with its AI ThreatFlip workflow | Topics across difficulty levels, formats and languages, with adaptive learning paths | Report Suspicious button for email and mobile | Your admin, with automated risk-based enrollment | Quote only, after a demo request |
| Hoxhunt | Email, SMS, phone calls and Teams | A training library plus AI-generated modules and micro-trainings, in 35 languages | One-click reporting with AI-generated feedback to the user | Your admin, with automated, adaptive difficulty | Quote only, per employee, after a 30-minute scoping call |
| Huntress Managed SAT | Phishing simulations based on real-world threats | Story-driven episodes of roughly 7 to 10 minutes, plus a custom content tool | Not listed on its product page | Huntress experts schedule training and simulations; most teams buy through a partner such as an MSP | Published MSRP: $2.08 per learner a month ($1.75 in its 100-learner example) |
Which platform fits a small business?
- You already own Microsoft 365 E5 or Defender for Office 365 Plan 2. Start with Attack simulation training, which you are already paying for. Microsoft 365 Business Premium includes Plan 1, which does not include it.
- Your attacks come by phone and text. KnowBe4 lists simulated vishing and callback phishing, and Hoxhunt lists SMS and phone call simulations. Microsoft's simulations are email-based.
- Nobody inside has time to run it. Choose a managed program, such as Huntress through a provider or a managed service like ours. A self-run platform with nobody running it produces a license bill and no results.
- You want to budget from a published price. KnowBe4 and Huntress publish list prices; Proofpoint and Hoxhunt quote after a call. Check the term as well as the rate: KnowBe4's list prices assume a three-year term.
What should you ask before choosing?
- Which channels does it simulate on our plan? Email, SMS, voice, QR codes and Teams are not all included everywhere.
- Where do reported messages go? A report button helps only if someone reviews the reports and pulls real phishing from other inboxes.
- How does it sync users? KnowBe4 lists Active Directory and SCIM provisioning; ask the others how new hires and leavers are handled.
- What will the insurer see? Ask for a sample report showing click and report rates over time and training completion.
- Who runs it every month, and for how long are we committed? Count the admin hours, and check whether the price assumes a multi-year contract.
How we run security awareness training
Our managed program starts with an unannounced baseline campaign, then runs a simulation every month built on current lures, with SMS and voice callback scenarios for the roles that receive them. Anyone who clicks gets a two-minute lesson. Reports from the Outlook button come to our engineers, who reply to the person and remove confirmed phishing from every inbox. Leadership sees the trend each quarter, and the annual summary is formatted for insurance and compliance questionnaires. It is included in our managed agreement and available on its own for businesses with internal IT.
Frequently asked questions
Is Microsoft's attack simulation training included in Business Premium?
No. Microsoft says Attack simulation training requires Microsoft 365 E5 or Microsoft Defender for Office 365 Plan 2. Business Premium includes Plan 1, which covers Safe Links, Safe Attachments and anti-phishing but not simulations. Plan 2, which Microsoft lists at $5.00 per user per month paid yearly as of October 2026, adds it; the alternative is a third-party platform.
How much does security awareness training cost?
Platforms charge per user, by the month or the year. KnowBe4 and Huntress publish list prices, while Proofpoint and Hoxhunt quote. The license is usually the smaller part of the cost: the time to run campaigns, chase training and report results is the larger part, which our guide to phishing training cost covers.
Which platforms simulate phishing by text message or phone?
Among these five, Hoxhunt lists simulations by SMS, phone calls and Teams, and KnowBe4 lists simulated vishing and callback phishing. Microsoft's Attack simulation training is email-based, with QR codes as an option. Proofpoint's and Huntress's product pages do not list SMS or voice simulations, so ask them directly.
Do these platforms work with Microsoft 365?
Microsoft's tool runs inside Microsoft 365 and uses Outlook's built-in Report button. KnowBe4's Phish Alert Button installs in Microsoft 365 and also reports Teams messages, and Hoxhunt and Proofpoint offer their own one-click report buttons. Whichever you choose, the reports should reach someone who acts on them.
Sources and further reading
- Microsoft Learn: Get started using Attack simulation training and the Attack simulation training FAQ, checked October 2026.
- Microsoft Defender for Office 365 service description and plans and pricing, checked October 2026.
- KnowBe4 Security Awareness Training, pricing and Phish Alert Button, checked October 2026.
- Proofpoint ZenGuide security awareness training, checked October 2026.
- Hoxhunt, Hoxhunt security awareness training and pricing, checked October 2026.
- Huntress Managed Security Awareness Training and pricing, checked October 2026.
- CISA, NSA, FBI and MS-ISAC: Phishing Guidance: Stopping the Attack Cycle at Phase One (October 2023).
Discuss security awareness & phishing training for your business.
Tell us about your current systems, the result you need and your timeline. We will discuss the work, responsibilities and pricing before you decide on an engagement.