CyberHoot vs ScamDrill
CyberHoot
cyberhoot.comScamDrill
scamdrill.comSide by side
| Figure | CyberHoot | ScamDrill |
|---|---|---|
| Price from | $125/mo | $2.50/mo |
| Free plan | — | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | — | Yes |
| Plans published | 1 | 10 |
| Spec score · Cybersecurity Training Platforms | 8.0 (#10) | 8.6 (#3) |
| Integrations | CyberHoot integrates with EntraID and Google Workspace. | Directory synchronization supports Okta, Azure AD/Entra ID and Google Workspace; SAML/OIDC SSO and SCIM are available as an add-on. |
| Purpose | CyberHoot provides security awareness training designed to help users recognize phishing attempts and reduce human risk. | ScamDrill trains families and organizations to recognize scams through realistic, safe simulations and follow-up lessons. |
| Security controls | CyberHoot lists encryption of sensitive data, access controls, and regular security audits as data-security measures. | The trust center states TLS and at-rest encryption, database row-level tenant isolation, passkey two-factor authentication, signed HMAC-SHA256 webhooks and strict security headers. |
Plans
ScamDrill
- FreeFree
- FreeFree
- AI Analysis add-on$2.99 a month
- Family$9 a month
- AI Analysis add-on$29.99 a year
- Family$84 a year
- Starter$449 a year
- Team$1,499 a year
- Business$5,999 a year
- Enterprise$19,999 a year
In their own words
CyberHoot
CyberHoot is a web-based security awareness training service focused on phishing recognition and reducing human risk. HootPhish uses interactive scenarios to teach six indicators of malicious emails; AttackPhish sends realistic phishing messages and ranks individual and team performance. Dark Web Monitoring generates reports about exposed personal data and recommends protective actions. Autopilot runs awareness programs with minimal oversight, without daily logins or manual sending. CyberHoot integrates with EntraID and Google Workspace, while its enterprise offering lists an API and integrations with enterprise software and security infrastructure. It serves individuals, MSPs, businesses, education institutions, enterprises and partners. Individual training is free and includes six foundational videos, monthly video training and quarterly HootPhish training. The service has a free plan and a 30-day trial. Autopilot costs $125 a month and includes 50 users; listed tiered pricing ranges from $2.50 user/mo at a 50-user minimum to $1.00/user/m. CyberHoot states that it complies with CCPA, GDPR, PIPEDA and the Australian Privacy Act.
ScamDrill
ScamDrill trains families and organizations to recognize scams through simulated messages and follow-up lessons. Family exercises cover email and SMS, while organization simulations also include QR code scams. The exercises adapt to each learner’s performance, increasing difficulty as skills improve. A dashboard tracks progress, scam types caught and areas that may need more practice. Family members can forward suspicious emails or texts for AI analysis; this message-checking feature is included with the Family plan. Organizations can sync rosters with Okta, Azure AD and Google Workspace, and Enterprise includes a REST API and webhooks. ScamDrill says its data is encrypted in transit and at rest, with database-level tenant isolation and passkey-based two-factor authentication. It also says simulated landing pages do not capture, transmit or store what a learner types. The company says it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is listed as planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001 and HIPAA.