Skip to main content
TrustRadius
Infosec IQ

Infosec IQ

Overview

What is Infosec IQ?

Infosec IQ security awareness and training aims to empower employees with the knowledge and skills to stay cybersecure at work and home. With over 2,000 awareness and training resources, Choose Your Own Adventure® Security Awareness Games and personalized learning experiences,…

Read more
Recent Reviews

InfoSec Use Case

8 out of 10
July 12, 2023
Incentivized
We use InfoSec to educate and evaluate our employees when it comes to handling phishing. We run monthly phishing campaigns with different …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Popular Features

View all 10 features
  • Industry-Specific Security Training (51)
    9.3
    93%
  • Security Reporting (55)
    9.2
    92%
  • Training Content Library (56)
    8.9
    89%
  • Phishing Simulations (57)
    8.9
    89%

Reviewer Pros & Cons

View all pros & cons
Return to navigation

Pricing

View all pricing
N/A
Unavailable

What is Infosec IQ?

Infosec IQ security awareness and training aims to empower employees with the knowledge and skills to stay cybersecure at work and home. With over 2,000 awareness and training resources, Choose Your Own Adventure® Security Awareness Games and personalized learning experiences, the…

Entry-level set up fee?

  • No setup fee

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

49 people also want pricing

Alternatives Pricing

What is KnowBe4 Security Awareness Training?

KnowBe4 is a security awareness training and simulated phishing platform used by more than 65,000 organizations around the globe. Founded by IT and data security specialist, Stu Sjouwerman, KnowBe4 helps organizations address the human element of security by raising awareness about ransomware, CEO…

What is Curricula?

Curricula, headquartered in Atlanta, helps organizations of all sizes to fix their cyber security awareness training programs by using storytelling. It is designed so that employees enjoy fun episodes that take them on adventures to learn how to actively defend themselves in real-world scenarios.…

Return to navigation

Features

Security

This component helps a company minimize the security risks by controlling access to the software and its data, and encouraging best practices among users.

8.6
Avg 8.3

Security Awareness Training

Common features of security awareness training products.

8.5
Avg 8.3
Return to navigation

Product Details

What is Infosec IQ?

Infosec IQ security awareness and training aims to empower employees with the knowledge and skills to stay cybersecure at work and home.


With over 2,000 awareness and training resources, Choose Your Own Adventure® Security Awareness Games and personalized learning experiences, the solution aims to present everything needed to prepare employees and strengthen the user's cybersecurity culture.


The platform can be customized and personalized to match an organization’s culture and employees’ learning styles.


With Infosec IQ, users can:
Personalize employee training with role-based modules in a variety of themes, styles and lengths to engage learners
Automate training cadence and delivery to keep lessons relevant, challenging and fun — and save time
Integrate with endpoint protection, LMS and SOC to streamline program management, reporting and attack response
Analyze employee risk scores, learning outcomes and reported phishing threats to anticipate — and remediate — cyberthreats
Improve programs with actionable dashboard data, helping the user fill compliance training gaps and educate high-risk employees

Infosec IQ Features

Security Awareness Training Features

  • Supported: Training Content Library
  • Supported: Multilingual Training Content
  • Supported: Training Gamification
  • Supported: Industry-Specific Security Training
  • Supported: Individualized Security Training Plans
  • Supported: Phishing Simulations
  • Supported: Security Reporting

Security Features

  • Supported: Role-based user permissions
  • Supported: Single sign-on capability

Additional Features

  • Supported: Security awareness training: Educate employees with pre-built training programs, microlearning, reinforcement tools and Choose Your Own Adventure® Security Awareness Games.
  • Supported: Phishing simulator: Choose from 1,000+ realistic phishing templates, simulate the most sophisticated attacks and prepare every employee for when a real attack strikes.
  • Supported: Reporting & assessments: Easily identify employee risk, document compliance, measure your cybersecurity culture and prove the effectiveness of your security awareness efforts.

Infosec IQ Screenshots

Screenshot of DashboardScreenshot of Content LibraryScreenshot of Phishing IndicatorsScreenshot of Learner Experience and Grades

Infosec IQ Videos

Infosec IQ Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported LanguagesArabic, Bosnian, Bulgarian, Chinese (Simplified), Chinese (Traditional), Czech, Danish, Dutch, English, English (Australian), English (British), Finnish, French, French-Canadian, German, Hebrew, Hindi, Hungarian, Indonesian, Italian, Japanese, Korean, Malay, Norwegian, Polish, Portuguese, Romanian, Russian, Slovak, Spanish, Spanish (Latin American), Swedish, Thai, Turkish, Vietnamese

Frequently Asked Questions

Reviewers rate Industry-Specific Security Training highest, with a score of 9.3.

The most common users of Infosec IQ are from Mid-sized Companies (51-1,000 employees).
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(185)

Attribute Ratings

Reviews

(26-50 of 141)
Companies can't remove reviews or game the system. Here's why
Sergey Morozov | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
In my organization, we use Infosec IQ for annual HIPAA certification/recertification, which is a required component. New users must undergo the required training, and our existing users must retake the training to stay compliant every year. <br>Along with that, we use Infosec IQ to provide additional training on various security topics, such as working from home, for example. It helps to keep our staff educated and aware of modern security threats.<br>Last but not least, is a phishing email simulator, that sends training phishing emails to our users. This feature allows us to train our users how to deal with phishing attacks.
  • SSO integration
  • Phishing attack simulator
  • Variety of training topics available to choose from
  • Training campaign scheduler is a little bit confusing. It takes time getting used to it
  • n/a
  • n/a
Infosec IQ is a great tool for an organization, like ours, that requires everyone to participate in certain training sessions. Scheduling such training sessions is a very convenient feature, that Infosec IQ provides. Built-in reporting allows the IT department to stay up-to-date on the participation levels and act accordingly.
It's hard to tell where it's less appropriate to be applied. With all the security threats evolving every day, security awarness is no longer an option. It's something that needs to be done at any organization to keep the staff educated and prevent possible damages. Infosec IQ is a great tool for that.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
It is used mainly for annual compliance training, but I do run some campaigns.
  • Phishing Campaigns
  • USB Phishing
  • Annual Compliance training
  • I have not had a case use that was not good.
I already do recommend it to others. It is absolutely fantastic for the annual compliance training. It has many other great pieces as well that I have not had the chance to use yet. But I do hope to use many other features in the future. There are many more resources to be tapped.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We use Infosec to conduct phishing campains on our staff, it works pretty well for awareness and training. After two years of using it we have noticed an awareness of email traffic, and what to look for when potentially malicious emails come into thier email. The only thing that we are currently noticing an issues with is false positives on test emails that staff didn't click on anything in the email, it will show up that they took action and clicked on a link.
  • Realistic campaign emails
  • easy to set up
  • good reporting features
  • Sometimes users get flagged as opening links in emails when they didn't
In the educational world it has been very benificial to raise awareness of scam and phishing email traffic and what to look for in emails. It also has given us quantifiable data to use with our staff on how well we have raised their awareness of potential threats. The fact that it automates training for staff is a bonus.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use Infosec IQ for phishing and end user awareness training. It has lowered our overall phish rate by over 20% in the first 3 years alone. We also utilize it for new hire training.
  • Custom phishing templates
  • User friendly training
  • More filters in groups for reports. to include department and group comparison.
  • Easier list of sending Ips and addresses for whitelisting
  • Easier way to view assigned training to templates.
I have recommended this to small businesses and academics. This tool is perfect for new learners and easy to follow.
I have also utilized this tool during my graduate program at Penn State.
Donna Gomez | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Delivering content to variety of audiences that covers CJIS, HIPAA/Privacy and PCI Compliance. Provides basic security concepts to all levels within the organization to engage employees on security topics. Phishing simulations that align with awareness modules, and fresh content released ensures message is delivered using humor, facts and meets accessibility needs.
  • Variety of content
  • New releases
  • Unique Gamification with Choose Your Own Adventure Series
  • Just the Facts series with Expert like Keaton make Security Accessible
  • Controlling delivery of email reminders (time schedule) to avoid middle of the night emails.
Compared to others this was easy to implement and create campaigns. Content is always updated and engaging.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Infosec IQ provides a platform for our district to effectively deliver IT safety and data privacy information to our staff.
  • Phishing scenerios
  • Data Security Training
  • Password Complexity Training
  • Deeper AD integration
  • Better reporting features
Infosec IQ does a great job of delivering real-world data security information to staff members in small usable chunks. Our district has also found the phishing scenarios to be an effective way to raise staff awareness.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Infosec IQ is used to increase cyber security awareness within the company by providing cyber simulation exercises and training.
  • Use of predefined templates for phishing simulations
  • Predefined and engaging training material and content
  • Reporting on the success of phishing simulation and training exercises
  • N/A
Infosec IQ is well suited for an environment that does not have dedicated resources to define Cyber Security training content and exercises.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use Infosec IQ for new hire Cyber Security training. Additionally, Infosec IQ is used for our PHISHING exercises. We rely on it for compliance reports.
  • PHISHING training
  • Reporting
  • Overall cyber security training
  • More frequent updates to security training modules
  • Better reporting tools
  • Better integration with other tools
I generally like Infosec IQ. The features that are offered suit my organization's needs. Support is quick to help and I like the customization and control we get for PHISHING campaigns.
Aron Swartz | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We were looking for a simple solution to educate our employees. We have long known that human error and social engineering are the weak links in our security defenses. We are optimistic that through regular training our employees will better be able to spot compromise attempts. Infosec IQ seems to fit that bill.
  • Inform employees of things they may not know
  • Interesting training material
  • Easy to use
The onboarding team is very friendly and happy to explain how the platform works and guide you through the settings. The awareness programs are very interesting because in security, mostly the weakest link is the people. Infosec IQ is also a great tool that educates and informs the people working inside the network.
Score 8 out of 10
Vetted Review
Verified User
It is used to help the organization meet the following requirements: - General Security Awareness Training (Phish, Whaling, Social Engineering, etc.) - HIPAA and PCI - Compliance and customized internal Training (Customized specific training for PCI compliance and Point of Sale Terminals.)
  • Training Modules
  • Groupings
  • Metrics
  • Reporting
  • Update a few modules to address ongoing or changing compliance requirements (PCI requirement 9 and point of sales security as an example)
[Infosec IQ has a] great introduction to several compliance requirements. Would enjoy seeing a bit more in the area of possible secure coding best practices or point of sales terminals.
November 01, 2022

Training for Daily Users

Score 10 out of 10
Vetted Review
Verified User
Incentivized
Currently, we use Infosec IQ as a training tool to help with keeping our users on guard against phishing emails and other types of attacks. The training and testing are part of our overall cybersecurity awareness training. Engaging the users in regular training helps to keep them alert and up to date on what to watch for when reviewing emails or browsing the internet.
  • Video training is informative and fun.
  • Feedback on training is immediate via QA at the end.
  • Completion certificate is available for users to track progress.
  • More flexibility in reports
  • Working with quarantined queues allowing multiple deletes at one time
  • Flexible options to bring users who missed a campaign up to date
Since we are only using the awareness training, I can only speak to that option. I feel the training is well thought out and presented in a reasonable length of time so as to not lose the attention of the employee watching the video.
Score 9 out of 10
Vetted Review
Verified User
We have implemented Infosec IQ to train all our staff about staying safe while using a device at work. Management now feel safer in the knowledge that our staff have a better understanding of cybersecurity and the dangers in this online age. Having many businesses under our corporate umbrella, Infosec IQ is able to blend professionalism with fun to provide amazing informational videos.
  • The vast scale of training modules and information available is stagging
  • Well thought out user Interface
  • Simple to create templates and campaigns for training.
  • In depth dashboards and reporting
  • More localised content (this is getting better for our area. Australia)
  • Ability to upload our own video content
Feedback from staff has be positive, they get a quick break from their work and learn about something different. The vast scale of training modules and information available is stagging. This gives us the option to always change the training up between being professional and having a little more fun with the choose your own adventure interactive training. Upper management can use the dashboard to pull all kinds of statistics about the training and which staff aren't completing it. Groups can be configured so that if staff fail or don't complete a training course then are automatically enrolled in the next one. Lots of little features that make the whole software really easy to use. The Staff at Infosec are always following up and are super friendly. They help with any problems quickly and always get back to you no matter how small an issue it is.
Score 10 out of 10
Vetted Review
Verified User
We have implemented Infosec IQ to provide annual security awareness training to all 4500+ employees in the County. Due to the flexibility of the product, departments within the County have been able to use Infosec IQ to distribute department-specific training (e.g., Safety training, product training) to their employees and the entire County.
  • Infosec IQ allows customers to easily synchronize with Active Directory to import users to the platform.
  • Infosec IQ provides customers with the ability to customize the training courses they want to provide to employees.
  • Infosec IQ permits customers to upload custom training modules to the platform to distribute as a course.
  • Infosec IQ provides several notification types (i.e., enrollment, start, finish, completion) to remind employees to start and complete their training.
  • Infosec IQ allows customers to import users to the platform directly in the console or by uploading a CSV file to the platform.
  • Infosec IQ could add additional filters on the campaign status screen so admins can focus on specific campaigns.
  • Infosec IQ could create ownership of campaigns, so other admins don't have the ability to delete campaigns they did not create.
Infosec IQ is well suited to provide security awareness training to small and large organizations. The ease of use of the products enables a small team with limited time to set up campaigns that require little interaction once started. If you have departments within your organization that want to distribute their own training, they can have a suborganization created within the platform. This allows them to manage their campaigns and not have access to yours. I have not encountered any scenarios where this platform has been less appropriate.
September 07, 2022

Great training tool.

Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use Infosec IQ to run email campaigns for our employee base on Phishing awareness. The users are getting better every time at finding the Phish and reporting it properly. It has been a very useful training tool for both long-term and new hires.
  • Training users on how to spot fake emails
  • Crafting unique and hard to detect email campaigns
  • Automating the delivery and testing schedule
  • More options for campaign customization
  • Updates regarding click-rates and how often the report is ran
Infosec IQ has been fantastic in the realm of false-positive Phishing campaigns for our internal employee base. I think in our environment it's super but it might be less appropriate where there are fewer internal users and more remote users. It would be more difficult to assist a userbase that was mostly remote.
Score 9 out of 10
Vetted Review
Verified User
We were looking for an online platform where users can be trained on IT security, in the prospect of safe browsing, safe use of social media, and identifying spam and phishing mail. We found this platform a great help and we adopted this.
  • Train users in play way manner.
  • Phish-sim is great tool to simulate phishing test.
  • Multilingual.
  • Latest topic and material to train users.
  • Pre defined and custom assessment.
  • Pre defined and custom Phishing mail template in multi-language.
  • Detailed reporting.
  • More training material for other department's users like HR admin, etc.
Best suited in IT security trainings and assessments, phishing simulation tests, less appropriate in detailed reporting and training of specific departments like HR and admin.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
InfosecIQ provides our cyber security training platform and phishing email testing platform. The cyber security training is thorough and quite customizable. The reporting capabilities are quite good as well. The phishing email testing platform has great content however with used in conjunction with Google Gmail, the "report phishing" function of Gmail causes false positives. This is something we are currently working with through Infosec IQ.
  • Phishing email content/templates
  • Cyber security training content
  • Phishing reporting via Gmail causes false postives
  • Updating users is not intuitive
As I stated previously, InfosecIQ provides our cyber security training platform and phishing email testing platform. The cyber security training is thorough and quite customizable. The reporting capabilities are quite good as well. The phishing email testing platform has great content however with used in conjunction with Google Gmail, the "report phishing" function of Gmail causes false positives. This is something we are currently working with through Infosec IQ.
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use InfoSec IQ for many purposes: - Mandatory and Essential training such as AML, KYC - Security awareness such as work from home, work during traveling, OWASP top 10 vulns, etc - Phishing campaigns: we execute quarterly campaigns which we use to increase our employee's awareness and teach them how to guard against such attacks
  • Good training Materials
  • Good Phishing campaigns templates
  • Easy to use and track campaigns
  • Integrating fun and learning
  • Provide back button when reviewing campaigns
  • Can not add voice over the videos without paying extra
  • Improve the videos voice as it provides not good experience in some cases
  • Improve navigation and UX between contents
It is good when it comes to preprepared tutorials that integrate fun with learning and when executing phishing campaigns. For example, security awareness, AML, KYC, work during travel, etc. It is less appropriate when a team want to add personal content and integrate it with the current training and when the voice is a matter of fact in the training if it can not be changed
June 14, 2022

Infosec IQ Review

Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use it to simulate phishing emails as well as security training. We want to make sure our employees are alert and aware of any potential security risks that may come through regular forms of communication. We send out monthly training videos as well as regular phishing simulations to keep people vigilant.
  • Simulated phishing emails
  • Security training
  • Maintaining alertness
  • Phish notify plugin could be polished more, it currently does not delete or archive successful phishing reports
Infosec IQ is very good at simulating phishing emails and ensuring that people are cautious when opening emails. Additionally, the training videos are easily digestible. It makes it easy to make sure that your employees are up to date on the latest security risks. It also helps ensure that people remain vigilant throughout their day-to-day processes.
Score 9 out of 10
Vetted Review
Verified User
Incentivized
we are an MSP with over 8000 endpoints that uses this product to train end-users on the dangers of phishing with in-depth training videos and phishing simulations. this enables us to provide them with the guarantee that we are not just reacting to possible problems but being proactive instead.
  • Training videos
  • Simulating what customers see in the real world
  • Creating a sense of curiosity about cybersecurity
  • Push a user to be more aware of their browsing
  • better management interface
  • faster reseller support
  • better integration documentation
Infosec IQ is a great program for training business users on the importance of safe browsing habits and the sorts of phishing they will come across. In my experience businesses have valued the simulations and training videos above a typical sit-down presentation on the matter. These emails allow staff to take advantage of the content on their own time.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
Within our organization we use InfoSec IQ to better train our staffs on all things security. We run phishing campaigns, cyber threat awareness campaigns and other informative security measure campaigns. Once ran, we are able to access the educational needs needed for our staff. Based off the reports we gather we are able to provide correction trainings using InfoSecIQ
  • Provide great product assistance
  • Provides an easy to use interface and product
  • Great detailed reports from campaigns
  • I believe Infosec IQ is pretty great, if I were to suggest something, it would be to make their certificates of completion a bit more appealing.
Overall, InfoSec IQ is well suited in the delivery of the services. We were able to drive up our organizations cyber security awareness by a huge percent. The training programs within InfoSecIQ provide a plethora of informational and educational content that has served our staff well. I would suggest maybe a more appealing certificate of completion for assessments.
May 23, 2022

Infosec Tic Toc

Score 8 out of 10
Vetted Review
Verified User
Incentivized
Infosec IQ training for Staff and Faculty achieved enhanced basic concepts needed for every user on the network with phishing and current threats. This was achieved with simple common sense Standard Operating Procedures (SOPs) for responding to threats on the network and mitigation techniques that could be used for all users connecting to the University's network.
  • integration with Azure Active Directory (AAD)
  • automate email campaigns
  • track campaigns
  • followup with training for users
  • Format of communications little bland incorporate better html templates
  • App for small devices phones tablets users can use
  • Integrate with M365 for phish reporting tool so can use both Infosec IQ tool while updating Microsoft Filter with user-submitted data.
Employee training well-suited suite. But again reporting tool falls short with its integration with the M365 reporting tools that need to integrate with each other.
Score 8 out of 10
Vetted Review
Verified User
In this new style of work, everybody is looking for working from home, and it also creates problems for data breaches due to a less secure environment compared to working in the company work area. Seeing this challenge we adopted the InfoSec IQ program to train our users to work in a secure manner by providing only training on different topics of IT and environment security.

InfoSec IQ keeps the training material updated which helps Admin to create new training programs every time using interactive videos and games, Phishing simulators as well.

Now our users are more aware and report issues in a timely manner.
  • Phishing simulation test.
  • Interactive videos on IT security.
  • Interactive Games on IT securities.
  • They have training modules for human resources and other staff as well.
  • Deep reporting like how many tries a user has taken to complete an assessment.
  • Software developer security training on coding part.
It has trained users to detect spam and phishing emails. Adopts good practice while working on BYOD and company laptops as well.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We utilize the IT Security training videos, assessments, and posters provided by Infosec IQ. We run organization-wide security training sessions/campaigns, and New Hire IT Security training via Infosec IQ. We also use the Phishing templates Infosec IQ offers and deploy phishing simulations to employees to assess company preparedness and awareness.
  • IT Security Training Videos
  • Reports/Dashboard to review Training/Phishing Simulation status
  • Managing Training for New Hires
  • Phishing Simulation templates
  • UI for selecting materials for training could be improved.
  • Navigation around the site takes some time to get used to.
Infosec IQ worked really well for us when we wanted to deploy New Hire training automatically to all new employees. Infosec allowed us to push new users to the system and automatically assigned the new hire training to them without us having to manually do anything. While it's not something I've used, I saw the possibility of setting up different training for new hires based on group/category, it's something I might consider in the future based on department. Follow-up training for phishing simulations for anyone that got phished was very easy as well. Infosec has the option to add all users that were phished to a specific group, and then deploy a separate training course to those users only.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
We use Infosec IQ for the new joiners and as well as a refresher to the existing employees. We use Infosec IQ for the various problems and scenarios and address them to the end-users and make every well aware.
  • Refreshing the topics
  • Current security related questions
  • The quality of materials and presentations
  • Few of the contents are old and can be updated
  • Certain times the tool doesn't work well with Chrome, so had to switch the browser
It always helped me and my colleagues in Infosec world with lots of awareness points depicted pictorially. This has helped shaping up and my understanding with respect to security.
Score 7 out of 10
Vetted Review
Verified User
Incentivized
We use Infosec IQ to make employees aware of phishing and other security-related news. infosec is used very often. Every new joiner gets an account at infosec. the business problem is that users are not aware of the risks, that’s why we train them
  • Different video materials to explain employees about phishing
  • A good and clear dashboard for admins
  • For questions we can always contact infosec, and they help us very well!
  • I have seen that materials can’t be downloaded, this could be helpful
  • Deliver videos in different languages
  • Add an rewarding program
I do not have a scenario where I can explain this question, all that I know is that Infosec IQ is always ready to help. You can ask them anything
Return to navigation