Hoxhunt

Hoxhunt provides security awareness training built around adaptive phishing simulation, with email incident response automation and a behaviour risk console that surfaces risky real world behaviours beyond email. The product is offered in multiple languages including German, and is positioned explicitly against traditional awareness solutions.

Personalising the difficulty of each simulation to the individual is the mechanism the product rests on, and it addresses a genuine defect in fixed campaigns. Sending the same simulated phish to everyone means it is trivial for the security aware and unfair to the vulnerable, teaching the first group nothing and humiliating the second. Adjusting difficulty per person keeps everyone near the edge of their competence, which is where training actually works.

Automating email incident response is the operational half. A programme that succeeds at getting employees to report messages creates a queue somebody must clear, and security teams that encouraged reporting without preparing for the volume end up ignoring it.

The behaviour risk console extending beyond email is the natural direction, since the risky behaviours that matter now include data pasted into an AI tool or credentials reused across services, none of which a phishing simulation can observe.