CMDashCybersecurity Maturity Dashboard

← All landscape areas

Human Risk Management · Foundational

Security Awareness & Phishing Simulation

Trains users and simulates phishing attacks.

7 options listedTypical cost: $10-$30/user/yrPROTECT (PR)

Overview

Awareness platforms deliver training and run simulated phishing to reduce human-driven risk and meet compliance mandates. Newer 'human risk management' tools personalize coaching by individual risk score. Inexpensive per user, with strong measurable ROI. Open-source tooling can run phishing simulations for free.

Cheap, high-ROI; people are the largest attack surface.

Advantages

KnowBe4 huge content library
Hoxhunt personalized and high-engagement
cheap per user with measurable ROI
Gophish free.

Trade-offs

Training fatigue and low retention if rote
metrics can be vanity
punitive phishing harms culture
never stops every click.

Vendors & tools in this area

KnowBe4Commercial

Largest awareness-training + phishing-sim library.

ProofpointCommercial

Email security + DLP + awareness; people-centric.

HoxhuntCommercial

Personalized, gamified human-risk training.

MimecastCommercial

Email security + resilience + archiving.

Arctic WolfManaged service

Broad MDR / security-operations concierge model.

GophishOpen source

Open-source phishing simulation.

Adaptive SecurityCommercial

AI-native security awareness platform built around deepfake/vishing/smishing simulation and behavior-based risk scoring.

Start free trial Browse the full atlas

Security Awareness & Phishing Simulation — Cybersecurity Landscape Atlas — CMDash