Infosec IQ vs SMARTFENSE Simulation Tools

Infosec IQ provides employee security awareness training and phishing simulations for organizations. Its library contains more than 3,000 role-based resources, and the phishing simulator has more than 2,000 templates; the vendor says it adds templates weekly. Training can be tailored to employee roles and security aptitude, with recommendations informed by assigned courses and engagement patterns. Dashboards cover completion, phishing activity, learner risk and culture survey results, with customizable, exportable reports. PhishNotify connects with Outlook and Gmail so employees can report suspicious email with one click. Listed integrations include Active Directory, Azure AD, SCIM, SSO, an open API and several endpoint protection products. The platform supports 34 course languages, automated training and risk scoring. The vendor says its training, simulations and learner tools comply with WCAG 2.2 AA and Section 508, and that completion tracking can document training for frameworks including HIPAA, PCI-DSS, SOC 2 and CMMC. Pricing is on request; a free phishing risk test is offered for up to 100 employees.

SMARTFENSE Simulation Tools is the simulation component of a SaaS security awareness platform. It covers phishing, ransomware, QR code, smishing, and USB drop campaigns. Users can edit simulation content or build scenarios from existing material or from scratch. Reports assess organizational vulnerability and changes in user behavior, while risk scores span users, groups, functional areas, hierarchical levels, and the organization. A Phishing Report Button lets users flag suspicious email for incident response review and records real-time metrics for reports of SMARTFENSE simulations. The product lists campaign automation, training content, SIEM export, and API access. Its documented REST API uses OAuth 2.0 and JSON for campaign results, risk scoring, and user management. Base integrations include Microsoft Entra ID, Google, Auth0, LDAP, and SAML 2.0; several other integrations are part of a separately contracted component. The SaaS service requires internet access, and its email and browsing domains must be allowlisted. Pricing is available on request.