Hoxhunt vs Infosec IQ

Hoxhunt provides security awareness and phishing training for organizations seeking to reduce human cyber risk. Its simulations can reach employees by email, SMS, phone call or Teams and can reflect context such as department and location. Training combines short lessons and interactive exercises with automated enrollment, reminders and completion tracking. The library includes more than 300 modules and regulatory tracks for PCI DSS, HIPAA, DORA and GDPR. Content Studio turns organizational policies and existing materials into custom training in under 60 seconds; administrators can review and edit the result. Hoxhunt also clusters reported email threats and supports automated remediation integrations. It supports Microsoft Exchange environments, including on-premise and Microsoft 365, as well as Google Workspace. Sign-on options include Microsoft Entra ID, AD FS, Google Workspace, Okta, Ping Identity and OneLogin, plus other SAML 2.0-compatible providers. Supported environments vary by email provider and client; native Mail apps on Windows and macOS are unsupported, and Outlook mobile support is limited to Exchange Online users. Pricing is by employee and available on request.

Infosec IQ provides employee security awareness training and phishing simulations for organizations. Its library contains more than 3,000 role-based resources, and the phishing simulator has more than 2,000 templates; the vendor says it adds templates weekly. Training can be tailored to employee roles and security aptitude, with recommendations informed by assigned courses and engagement patterns. Dashboards cover completion, phishing activity, learner risk and culture survey results, with customizable, exportable reports. PhishNotify connects with Outlook and Gmail so employees can report suspicious email with one click. Listed integrations include Active Directory, Azure AD, SCIM, SSO, an open API and several endpoint protection products. The platform supports 34 course languages, automated training and risk scoring. The vendor says its training, simulations and learner tools comply with WCAG 2.2 AA and Section 508, and that completion tracking can document training for frameworks including HIPAA, PCI-DSS, SOC 2 and CMMC. Pricing is on request; a free phishing risk test is offered for up to 100 employees.