Hoxhunt vs. KnowBe4 Security Awareness Training

If emails are used for confidential communication, Hoxhunt is a HUGE benefit. I have caught myself feeling lax over emailing and clicking links. Hoxhunt makes you really evaluate safety and legitimacy of the emails that are received. We even have laughs about it at staff meetings where staff admit to getting "hoxhunted" and clicking a fake link.

Incentivized

I think the most important factor is that our risk has decreased significantly among staff. Our staff is well below the industry (Education) benchmark in terms of users that are "prone to phishing". We also have multiple instances over the years where employees have stopped real efforts to access data illegally or an attempt to take funds from our institution

Incentivized

• Training Packages - They cover a wide range of topics that spam emails, social media and physical security such as USB sticks
• Achievements as incentives - The gaming style of collecting achievements and stars for reporting emails or completing training incentivizes people to engage in a consistent and enthusiastic way.
• Training Emails - They are able to replicate phishing emails in a realistic way, so it isn't easy to spot straight away meaning we now look at every email with a critical eye which makes us safer.

Incentivized

• Phish tests can be set to various difficulty levels as staff becomes more knowledgeable in catching phish emails.
• Automated phish tests and training save a lot of admin time. The product can also test for phone and USB stick practices.
• The phish alert button in Outlook, along with PhishER and PhishFlip allow easy managing and response to actual phishing emails.
• The interactive training is well designed to cover all types of phishing and safe email and phone behavior.

Incentivized

• More training opportunities - The Hoxhunt page itself only has a few training modules which I have completed already
• An even spicier spicy mode - Scammers are always evolving, so I want to be able to identify the toughest phishing attempts.
• Eliminate "missed" emails. Sometimes I don't read my inbox right away. I don't think emails should count as "missed" just because I didn't report it within a few days.

Incentivized

• The provided templates for phishing simulations are mainly available in English. There are also some templates available in our native language, but their number is small. We have seen other platforms offer way more phishing simulation templates in our language.
• Although there is a really huge number of training videos available, some of them are outdated and no longer have much to offer. Some cleaning up could help in this direction.
• Although there a some games / puzzle like trainings available, we have seen other platforms offer more and better ones (on the other platforms had they had almost no videos at all...). It would help significantly to also invest in enriching the provided puzzles / games.
• We have seen other platforms offer games, where, for example, employees of the company can compete against each other while working together in groups to achieve a common goal (e.g., eliminate a fictional security threat that has "hit" the company. Plan the steps needed to be taken, take the steps one after another and have a chance to see the impact each action has. At the end the team that has suffered the least cost to end the threat is the one that wins. Just an example. The point is to make this challenging, using gamification and to make the employees part of the prevention force of the company against cybersecurity threats.

Incentivized

Hoxhunt has been great! End users learn quickly and throughout their daily work

Incentivized

This product has many benefits that we depend on. Even without the trainings/campaigns, having a program that can easily report suspicious emails as well as pull those emails from all inboxes is a major benefit. With everything combined together, KnowBe4 is a complete package that is great for any business.

Incentivized

it is very easy to use. it is clear and provides information as to why the type of email is one to look out for. It automatically takes you to the required information when you have spotted that it is a Hoxhunt email.

Incentivized

The training videos we have access to are high quality, and provide a wide variety. The Inside Man videos has a cult following within our organization, and has driven a much greater interest in security awareness. And KB4's willingness to negotiate pricing for us as a nonprofit has been very valuable to us as well.

Incentivized

There have only been a handful of outages in the 2 years we have had the product. Even during those instances, parts of the system were still operational

Incentivized

Pages load quickly, filter/sort quickly, and don't slow down or freeze. Everything is smooth and very easy to use. There are a places in the UI where you can forget how to get there, but other than that everything is great. We have had no issues using any part of the website.

Incentivized

Tech prod support is great! I did have to ask for a new customer success rep, needed a more experienced person to match my 12 years of experience running Cybersec training programs. Would suggest that more matching of rep level of knowledge to client level knowledge would help.

Incentivized

Helpful and knowledgeable account managers have helped us navigate and use the system to our full potential

Incentivized

confusing question. I inherited this application so I didnt get any formal training other than the person who was leaving. The CSM provided some later on when I asked in a zoom call

The implementation went really well and KnowBe4 was there the whole time on setup to make sure things were setup correctly. The only thing we had to figure out on our own was to script users automatically being added to security groups. So that when they sync to knowBe4 from AD they are placed into the same/correct groups.

Incentivized

Symantec was something I used in my previous company, it had some issues once in a while where I had to re-generate the code for my new ID. I know its for over all protection, but if I didn't have my phone that day, I'd be unable to log in. Hoxhunt helps that way as there is a SSO authentication and needs the fingerprint, I guess it works different for different companies based on their regulations and privacy protection. Haven't really used any other tool like this

Incentivized

KnowBe4 offered a significantly more favorable cost-benefit ratio compared to other solutions. Its seamless integration with our existing infrastructure—particularly Active Directory and email systems—was the most compatible with our operational and security requirements.

Incentivized

The product scales greatly. As long as you upgrade the license to support the number of users you are needing, adding in those new users is easy. Also getting those users set up with trainings/campaigns is very easy as well

Incentivized

• I have been able to identify and report 3 real scam emails thanks to Hoxhunt.
• Unfortunately I have no data of the overall company's benefit with regards to the use of Hoxhunt.
• The training has also been helpful to me in my personal email. I think that helps with work productivity, because I haven't been in the situation where I'm worrying about having been scammed outside of work.

Incentivized

• We've had several phishing attempts that were "emergencies" to update banking information that users didn't fall for, so that has saved potentially thousands of dollars.
• I don't have specific-hard numbers, but I do believe KnowBe4 has been very valuable to us.

Incentivized