Hoxhunt

Hoxhunt is an AI-powered security awareness and phishing training platform for organizations seeking to reduce human cyber risk. Its simulations can reach employees by email, SMS, phone call, or Teams and use context such as department and location for personalization. Training combines short lessons and interactive exercises with automated enrollment, reminders, and completion tracking. The library includes 300+ modules and regulatory tracks for PCI DSS, HIPAA, DORA, and GDPR. Content Studio can turn organizational policies and existing materials into custom training in under 60 seconds; administrators can review and edit the result. The incident response platform groups reported threats and supports automated remediation integrations. Hoxhunt supports Microsoft Exchange, including on-premise and Microsoft 365, as well as Google Workspace. Sign-on options include Microsoft Entra ID, AD FS, Google Workspace, Okta, Ping Identity, OneLogin, and other SAML 2.0-compatible providers. Pricing is by employee and available on request. Hoxhunt was founded in 2016 and is headquartered in Helsinki, Finland.

Hoxhunt combines phishing simulations, training content, and reported-threat handling for organizations. Supported environments vary by email provider and client, and pricing requires a quote.

Hoxhunt suits organizations looking to train employees against phishing and manage security awareness. Its supported email environments and identity providers should be checked against an organization’s setup.

Overview

Hoxhunt is an organizational security platform that brings employee training and reported-email response alongside phishing exercises. It suits security teams building an ongoing awareness program across a workforce. Its range of training and reporting tools is a strong draw, while custom pricing and email-client limits call for a careful fit check.

Key features

Simulations can arrive through email, SMS, phone calls, or Teams and adapt to context such as an employee’s department or location. This gives teams several ways to tailor exercises; the supported experience still depends on the email provider and client.

Training combines short lessons and interactive exercises with automated enrollment, reminders, and completion tracking. The library contains more than 300 modules and regulatory tracks for PCI DSS, HIPAA, DORA, and GDPR. Content Studio can turn internal policies and existing material into a custom lesson in under 60 seconds, which administrators can review and edit. That can help teams adapt training to their organization without starting from a blank page.

Employees can report suspicious messages with a phish reporting button. Hoxhunt clusters reported threats and supports automated-remediation integrations, connecting awareness work with email incident response. It supports Microsoft Exchange, including on-premise and Microsoft 365 environments, as well as Google Workspace.

Single sign-on works with Microsoft Entra ID, AD FS, Google Workspace, Okta, Ping Identity, OneLogin, and other SAML 2.0-compatible identity providers. Some licenses include Power BI Cloud Export. Splunk ingestion requires customers to build and maintain their own integration through Hoxhunt’s GraphQL API, so teams planning that connection should account for ongoing integration work.

Pricing

Hoxhunt uses custom pricing, quoted per employee according to workforce size and required capabilities. Organizations can request a quote, but there is no published price to use for upfront budget comparisons. This model can accommodate different deployments, though it makes direct cost planning harder before a sales conversation.

The custom quote plan includes phishing simulations, a phish reporting button, automated training, and SSO support. There are no lower published tiers to compare; buyers should match the quote to the capabilities and employee count their program needs.

Platforms

Hoxhunt lists Android, iOS, macOS, web, and Windows support. Compatibility depends on the mail environment: native Mail apps on Windows and macOS are unsupported, while Outlook mobile support is limited to Exchange Online users. Organizations should confirm their specific email provider and client combination before rollout.

Who it's for

Hoxhunt is a strong fit for organizations that want recurring, context-aware phishing exercises, structured training, and a way to handle employee-reported threats in the same program. Its 300-plus training modules and regulatory tracks also suit teams that need a broad curriculum. It is less compelling for buyers who need a published per-seat price, rely on unsupported mail clients, or want Splunk ingestion without maintaining a custom integration.

Pros and cons

• Pros: Simulations span email, SMS, phone, and Teams, with personalization based on employee context.
• Pros: Automated enrollment and reminders, completion tracking, and a large training library support an ongoing program.
• Pros: Reported-threat clustering and remediation integrations connect employee reporting to incident response.
• Cons: Custom per-employee quotes make costs difficult to compare before procurement.
• Cons: Support varies by mail client, including no support for native Windows or macOS Mail and limited Outlook mobile support.
• Cons: Splunk data ingestion requires customers to build and maintain their own API integration.

Alternatives

For a free, open-source phishing framework, consider Gophish; it supports self-hosted use across Linux, macOS, and Windows. If a freemium option with a stated free tier for up to 10 employees is a better fit, CanIPhish offers that entry point. For an alternative with an Infosec Skills team subscription and Enterprise features, compare Infosec IQ. SMARTFENSE Simulation Tools is another paid simulation option.

Other options include Proofpoint Email DLP and Encryption, Shirudo, Kaspersky Research Sandbox, and Mimecast Data Leak Prevention.

Browse Phishing Simulation Software, Security Awareness Training Software, and Cybersecurity Training Platforms to compare more options by category.

Verdict

Choose Hoxhunt if your organization wants tailored phishing simulations, a substantial training program, and reported-threat handling under one platform. Its combination of training and incident response is the main reason to shortlist it. Look elsewhere if you need clear published pricing, broad support for native mail clients, or a Splunk connection that does not depend on your own integration work.