Living Security vs SMARTFENSE Simulation Tools

Living Security provides security awareness training for organizations that need individualized employee risk training and compliance support. Its platform includes hundreds of professionally produced, plot-driven live-action modules that can be tailored by role, industry, department, and specific risk area. Ready-to-use campaign templates, audience filters, and multi-campaign management support program administration. Training is available in 20 languages, with templates described in more than 26 languages. Microsoft Teams and Slack can deliver reminders and nudges. Risk mitigation reporting covers individual, team, and company levels. Living Security lists more than 160 native integrations, custom API endpoints, and CSV uploads, producing more than 300 Human Risk signals. The training page says requirements for PCI, SOC, NIST, CMMC, HIPAA, FedRamp, and more are met. Web access supports current Microsoft Edge and Google Chrome. Phishing simulations, risk scoring, automated training, SSO, and a phish reporting button are listed.

SMARTFENSE Simulation Tools is the simulation component of a SaaS security awareness platform. It covers phishing, ransomware, QR code, smishing, and USB drop campaigns. Users can edit simulation content or build scenarios from existing material or from scratch. Reports assess organizational vulnerability and changes in user behavior, while risk scores span users, groups, functional areas, hierarchical levels, and the organization. A Phishing Report Button lets users flag suspicious email for incident response review and records real-time metrics for reports of SMARTFENSE simulations. The product lists campaign automation, training content, SIEM export, and API access. Its documented REST API uses OAuth 2.0 and JSON for campaign results, risk scoring, and user management. Base integrations include Microsoft Entra ID, Google, Auth0, LDAP, and SAML 2.0; several other integrations are part of a separately contracted component. The SaaS service requires internet access, and its email and browsing domains must be allowlisted. Pricing is available on request.