Hut Six Security

What Hut Six Security does

Hut Six Security (legal name: Hut 6 Security Limited) is a UK-based B2B SaaS provider of security awareness training and simulated phishing, founded in 2016 and headquartered in Newport, Wales. The company serves UK organisations including central government agencies (the Office for National Statistics, the Met Office), mid-market and enterprise private firms (IQE, Getronics, Equisoft) and education bodies (World Skills UK), with a value proposition centred on reducing phishing susceptibility and supporting compliance with GDPR, ISO 27001, SOC 2, and Cyber Essentials. Disclosed investors include Wesley Clover (Sir Terry Matthews' VC fund), the Development Bank of Wales, the Waterloo Foundation, and the Welsh Government across funding rounds dated 2017, 2019, and 2023 totalling approximately £963,459, and the company is an alumnus of The Alacrity Foundation.

The platform is delivered via a web browser and integrates three components: an LMS, a security awareness training curriculum (animations, interactive tutorials, and branching scenario narratives), and a phishing simulator with automated campaigns, a template library, and a drag-and-drop custom phish editor. The Information Security Course is fully conformant with WCAG 2.1 Level AA, supporting screen readers (JAWS, NVDA), keyboard navigation, closed captions, and mobile-friendly content—an unusually thorough accessibility standard that differentiates the product for UK public sector procurement. Pricing is tiered (Starter / Professional / Enterprise) with per-user subscription; the Enterprise tier adds unlimited phishing simulations, external LMS integration, SSO and Active Directory support, and a complementary free product—Cyber Shorts—delivers 180-second public-facing micro-training videos.

Hut Six operates a per-user, per-year subscription model, distributed primarily through an inside-sales, demo-led motion (a "Book a Meeting" CTA on its website) supplemented by a 14-day no-credit-card-required free trial and a partner/referral channel. Marketing combines HubSpot-managed email/CRM, content marketing (blog, webinars, Cyber Shorts), SEO targeting GDPR/ISO 27001/Cyber Essentials keywords, and paid marketing managed by Web Marketer Ltd. The board is led by Chairman Prof Simon Gibson CBE, Managing Director Simon Fraser, Technical Director Daniel Steward, and Non-Executive Director Mike Doyle. With a 1–10 disclosed headcount and self-description as a "rapidly growing cyber scale-up," Hut Six is a small but capital-backed UK cyber training vendor targeting enterprise, public sector and SMB buyers.

Name

Hut Six Security

Legal name

Hut 6 Security Limited

Website

https://hutsix.io

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1–10 employees

Short description

Hut Six Security is a UK-based B2B SaaS platform delivering integrated security awareness training and simulated phishing to help UK enterprises, government agencies, and SMBs reduce human-error cyber breaches and meet GDPR, ISO 27001, SOC 2, and Cyber Essentials compliance.

Ownership category

akta.pro rank

Product category

Security Awareness Training

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Cloud & SaaS Security Awareness (e.g., M365/Google Workspace) (EDABAGAG)

Keywords

• Security awareness training
• Phishing simulation
• Cyber compliance training
• Security learning management
• Human risk management

Headquarters

HQ city

Newport

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. SaaS Subscription Licensing: Hut Six operates as a B2B SaaS company selling subscription licences for its security awareness training and phishing simulation platform. Pricing is tiered (Starter, Professional, Enterprise) and likely sold on a per-user, per-year basis. The platform includes built-in reporting and integrations (SSO, LMS) for enterprise procurement.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

Hut Six Security sells a unified cloud-based B2B SaaS platform that delivers Security Awareness Training alongside an integrated Phishing Simulator, both managed through a built-in Learning Management System. The platform is sold on tiered annual or multi-year subscriptions (Starter, Professional, Enterprise) per user, and is targeted at UK and international organisations needing to reduce human cyber risk and meet GDPR, ISO 27001, SOC 2, and Cyber Essentials compliance.

Product overview

Hut Six Security is a cloud-based SaaS platform offering security awareness training and phishing simulation as an integrated unified solution. The core platform combines the Security Awareness Training (which includes the built-in Learning Management System, Cyber Awareness Accredited curriculum, and Interactive Scenario Refreshers) with the Simulated Phishing module (powered by the Custom Phish Editor and integrated metrics reporting). Training is delivered across three pricing tiers: Starter (Cyber Awareness Basics, 6 modules, 2 simulated attacks per user/year), Professional (21-module accredited curriculum, 4 simulated attacks, email support, feedback tools, SSO), and Enterprise (unlimited simulated attacks, interactive scenario refreshers, external LMS integrations, phishing editor, automatic reports). The platform also offers free Cyber Shorts micro-training for individuals.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Awareness Training Cloud-based SaaS product providing engaging, bite-sized cyber security training modules with built-in assessments and branching scenario tutorials, designed to reduce human error and achieve compliance for organisations of all sizes.
• Simulated Phishing Automated phishing simulation tool that schedules mock phishing campaigns, tracks opens, clicks and submissions, and delivers point-in-time anti-phishing training to staff who engage with simulated attacks.
• Integrated Learning Management System (LMS) Built-in LMS used to manage the security awareness programme, track user progress, and generate compliance and behavioural-change reports at individual, team and organisational levels.
• Cyber Shorts Free, bite-sized cyber security micro-training videos of 180 seconds or less, made available to the general public and shareable with friends and family for personal cyber education.

Quantifiable outcome

• Research indicates well-structured security awareness training can reduce phishing-related incidents by up to 70%
• +3 more outcomes

Named customers6 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

Feature5 records

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Phished: Belgian-headquartered security awareness and phishing simulation platform that automates training journeys for SMBs and enterprises — a comparable single-platform offering in the European market.
• Terranova Security: Security awareness training and phishing simulation provider with a strong content library and multilingual coverage, competing for the same enterprise compliance-driven budgets as Hut Six.
• Hoxhunt: Security awareness and phishing simulation SaaS built around behavioral change and gamified training, serving mid-market and enterprise European customers — a near analog to Hut Six's positioning.
• KnowBe4: The dominant global player in security awareness training and phishing simulation; sells a similar integrated SaaS platform to enterprise and SMB buyers and is the category leader Hut Six most directly competes against.
• Lucy Security: Awareness training + phishing simulation SaaS with strong LMS and custom-phishing-editor features; comparable scope to Hut Six's integrated platform and similar SMB-to-enterprise split.
• Cofense: Phishing-focused security awareness platform combining simulations, reporting, and intelligence. Closely comparable in phishing-simulation depth and enterprise/government customer mix.

Broad incumbents

• Proofpoint Security Awareness: Broader enterprise security incumbent that bundles awareness and phishing simulation into a wider threat-protection portfolio, often displacing pure-plays like Hut Six in large enterprise deals.
• Sophos Phish Threat: Phishing simulation and awareness training included in the broader Sophos endpoint and network security portfolio — a comparable bundled competitor for channel-sold SMB and mid-market accounts.
• Microsoft Defender for Office 365 Attack Simulator: Microsoft bundles phishing simulation and training into the Defender for Office 365 suite, undercutting standalone platforms on price for M365-centric organizations and exercising pricing pressure on Hut Six's mid-market deals.

Emerging players

• CyberFish: Early-stage phishing simulation and awareness provider focused on real-time, adaptive training — an emerging pure-play competitor targeting the same use case as Hut Six's phishing product.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/HutSixSecurity

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds3 records

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Hut Six Security