Hoxhunt

Overview

Hoxhunt is an organizational security-awareness platform that brings phishing simulations, employee training and reported-email response together. It is a strong fit for security teams building a recurring awareness program across a large workforce, rather than buying a standalone simulation tool. Its breadth is balanced by custom pricing and email-client restrictions that can affect deployment.

Key features

Simulations can arrive through email, SMS, phone calls or Teams, with content tailored to employee context such as department and location. That range gives teams more ways to make exercises relevant than email-only campaigns, but the experience depends on the organization’s mail provider and client.

Training combines short lessons and interactive exercises with automated enrollment, reminders and completion tracking. The library contains more than 300 modules and regulatory tracks for PCI DSS, HIPAA, DORA and GDPR, offering a useful base for organizations that need to structure ongoing training around several requirements. Content Studio can convert internal policies and materials into custom training in under 60 seconds; administrators can review and edit the result before using it.

Employees can report suspicious email with a phish-reporting button. Hoxhunt clusters reported threats and supports automated-remediation integrations, connecting awareness activity to incident response. It supports Microsoft Exchange, including on-premise and Microsoft 365, as well as Google Workspace.

Single sign-on works with Microsoft Entra ID, AD FS, Google Workspace, Okta, Ping Identity, OneLogin and other SAML 2.0-compatible identity providers. Some licenses include Power BI Cloud Export. Splunk ingestion requires customers to build and maintain an integration through Hoxhunt’s GraphQL API, so teams seeking a ready-made Splunk connection should account for that work.

Pricing

Hoxhunt uses a paid, custom-quote model. The Custom quote plan is priced per employee, with the quote depending on employee count and required capabilities. Organizations should request a quote against their workforce size and feature needs; there is no published self-serve price to compare or budget from.

This structure is suited to organizations evaluating a broader platform with simulations, automated training, reporting and SSO, but it is less convenient for smaller teams that need a clear public price before engaging. No cheaper published tier is available to trade breadth for a lower stated cost.

Platforms

Hoxhunt lists Android, iOS, macOS, web and Windows support. Compatibility is not uniform across every mail setup: native Mail apps on Windows and macOS are unsupported, and Outlook mobile support is limited to Exchange Online users. Organizations with mixed email clients should verify coverage before rollout.

Who it's for

Hoxhunt is best suited to organizations that want personalized, multi-channel phishing exercises alongside structured training and a process for handling employee-reported threats. Its training library, automated enrollment and completion tracking can support recurring programs, while its identity-provider integrations suit organizations using established SSO systems. It is a weaker fit for teams that need an inexpensive, self-serve option, broad support for every native mail client, or a maintained Splunk integration without building one themselves.

Hoxhunt reports 3 million users worldwide. It lists GDPR, CCPA, SOC 2 Type II and SOC 3, and says SOC reports are available to customers and prospects on request. The company says it processes user data to provide its service and does not sell that data to third parties; dedicated Compliance and Security staff can assist with regulatory and security questions.

Pros and cons

• Pros: Simulations span email, SMS, phone and Teams, and can reflect employee context, giving security teams flexibility beyond email-only exercises.
• Pros: More than 300 training modules, regulatory tracks, automated assignments and completion tracking help organize a sustained training program.
• Pros: Reported-threat clustering and remediation integrations bring employee reporting into the same platform as awareness training.
• Cons: Custom employee-based pricing requires a quote, making initial cost comparison harder for buyers.
• Cons: Native Windows and macOS Mail apps are unsupported, while Outlook mobile support is limited to Exchange Online.
• Cons: Splunk ingestion depends on a customer-built, customer-maintained GraphQL integration.

Alternatives

Phishing Simulation Software is a useful category comparison for buyers focused on simulation tools; Cybersecurity Training Platforms and Security Awareness Training Software broaden the comparison toward training-led options.

• CanIPhish is worth considering if a freemium option matters: its Free plan costs nothing, billed forever, for up to 10 employees.
• Gophish is the alternative to consider when a free, open-source phishing framework is the priority.
• SMARTFENSE Simulation Tools is another paid simulation option for buyers comparing platforms.
• Trellix Data Loss Prevention is the better direction for enterprise buyers seeking protection for endpoints, email, web, networks and data storage, managed on-premises or as SaaS.
• Infosec IQ is an alternative to compare when LMS integration and SCORM support are important.
• Shirudo is another paid option to consider.
• Check Point MDR/MPR is an alternative for buyers looking at managed detection and response plans.
• Keepnet Phishing Simulator is worth comparing if a standalone simulation product or one-time PAYG simulations for consulting companies fit better.

Verdict

Choose Hoxhunt if your organization wants a connected program of personalized phishing simulations, structured training and reported-threat handling, with SSO for its identity environment. Its main trade-offs are quote-based pricing and client-specific mail limits; organizations that need predictable public pricing, unsupported native Mail clients or a ready-maintained Splunk integration should look elsewhere.