Infosec IQ

Infosec IQ provides employee security awareness training and phishing simulations for organizations. Its library includes more than 3,000 role-based resources, while its phishing simulator has more than 2,000 templates; the vendor says it adds templates weekly. Training can be tailored to employees’ roles and security aptitude, with recommendations informed by assigned training and engagement patterns. Dashboards cover completion, phishing, learner risk and culture survey data, and reports can be customized and exported. PhishNotify connects with Outlook and Gmail so employees can report suspicious messages with one click. Listed integrations include Active Directory, Azure AD, SCIM, SSO, an open API and endpoint protection products. The vendor says its training content, simulations and learner tools comply with WCAG 2.2 AA and Section 508, and that automated tracking can document training for frameworks including HIPAA, PCI-DSS, SOC 2 and CMMC. Multi-tenant administration supports accounts across divisions, regions or clients. A free phishing risk test is offered for up to 100 employees. Pricing is available on request.

Infosec IQ combines training, simulated phishing and reporting, with options for integrations and multi-tenant administration. Organizations can request pricing or try the phishing risk test for up to 100 employees.

It suits organizations that need employee security training, phishing simulations and reporting across teams or client accounts. The vendor also describes the platform as built for managed service providers.

Overview

Infosec IQ is an employee security awareness and phishing simulation platform for organizations. It suits teams that need role-based training, program reporting and administration across multiple divisions or clients. Its broad toolset supports structured security programs, while custom pricing makes it harder to compare costs before requesting a quote.

Key features

The library includes more than 3,000 role-based training resources across 34 course languages. Teams can tailor training to employees’ roles and security aptitude, with recommendations informed by assigned courses and engagement patterns. This gives program owners ways to target learning to different groups, though it also leaves them responsible for deciding how to assign and manage those paths.

More than 2,000 phishing templates, with additions each week, support simulations for varied scenarios. Risk scoring and automated training connect simulation results to follow-up learning. PhishNotify adds one-click suspicious-email reporting in Outlook and Gmail, which can make employee reports part of the same awareness program.

Dashboards cover completion, phishing, learner risk and culture survey data; teams can customize and export reports. Integrations include Active Directory, Azure AD, SCIM, SSO and an open API, plus endpoint tools from Symantec, CrowdStrike, Sophos, Trend Micro, Carbon Black, McAfee and Cisco AMP for Endpoints. That breadth will matter most to organizations tying training to existing identity and security systems.

Infosec says its training content, simulations and learner tools comply with WCAG 2.2 AA and Section 508. Automated completion tracking and reporting can document training for HIPAA, PCI-DSS, SOC 2 and CMMC. Multi-tenant administration supports divisions, regions or clients, and the vendor describes the platform as built for MSPs. Managed services are also available, including a dedicated client success manager, a 12-month program, monthly impact assessments, custom reporting, and quarterly and annual reviews.

Pricing

Infosec IQ is paid, with custom pricing. The Standard plan includes unlimited security awareness training, unlimited phishing simulations and prebuilt dashboard reports. It is the clearest fit for teams seeking the core program without the additional administration and reporting capabilities of higher tiers.

Enterprise includes all Standard features, LMS integration, SCORM support, custom reporting and global administration. Those additions suit organizations that need to connect a learning management system or oversee programs across locations; Standard gives up those enterprise management options. Infosec IQ + Skills includes all Enterprise features plus an Infosec Skills team subscription, making it the tier for buyers who also want that team subscription. All three plans have custom pricing, so organizations need a quote to compare their costs.

Organizations can request a free phishing risk test for up to 100 employees; Infosec says it sends results within 24 hours. This offers a limited way to assess phishing risk before buying, rather than a free ongoing training plan.

Platforms

Infosec IQ supports Android, iOS and web, along with an API. PhishNotify works with Outlook and Gmail.

Who it's for

Infosec IQ is best suited to organizations running ongoing awareness programs across varied roles, languages or business units, especially those that need simulations, reporting and integrations in one platform. Its multi-tenant administration and MSP focus also suit service providers managing client programs. Smaller teams looking for a free, continuing training plan may prefer an alternative with a free tier.

Pros and cons

• Pros: A large role-based library, 34 languages and personalized recommendations give program owners options for varied workforces.
• Pros: Unlimited training and simulations on Standard pair with phishing risk scoring and automated training.
• Pros: Customizable reports, compliance tracking and global or multi-tenant administration support larger programs and client management.
• Cons: Custom pricing across plans makes upfront cost comparison difficult.
• Cons: Standard has prebuilt reports; custom reporting and global administration require Enterprise.
• Cons: There is no ongoing free plan described; the free test is capped at 100 employees.

Alternatives

Choose Wizer if a no-cost starting point matters: its free plan offers basic annual awareness training, basic user management, limited reporting and automatic learner reminders. Hoxhunt is another paid option with custom quotes based on employee count and required capabilities, so it may suit buyers comparing quote-based services.

Proofpoint Email DLP and Encryption is a paid option for readers considering that product. SafeTitan offers paid security awareness training with pricing based on users or modules and flexible subscription options. Kaspersky Research Sandbox is a paid alternative with cloud or on-premise deployment, including air-gapped environments.

SentryMail has a freemium model. Cofense PhishMe has a free plan as well as a quote-based Enterprise plan. Hackiwi offers free options for individuals and families and for organizations with up to 20 users.

Browse more options in Security Awareness Training Software, Phishing Simulation Software and Cybersecurity Training Platforms.

Verdict

Infosec IQ is a strong choice for organizations that need a full security awareness program with tailored learning, phishing simulations, reporting and administration that can scale across teams or clients. Its main advantage is the breadth of the program and its integration options; its main drawback is that custom pricing leaves buyers without a clear cost comparison until they request a quote. Choose it when those capabilities match your program’s needs, and look elsewhere if a free ongoing plan or upfront pricing is essential.