CyberHoot
- Company typePrivate
- Founded2014
- HeadquartersPortsmouth, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What CyberHoot does
CyberHoot is a cloud-based security awareness training (SAT) SaaS platform built around a positive-reinforcement methodology that explicitly positions itself against traditional punitive, "gotcha" phishing tests. The core Autopilot platform automates the full training lifecycle—scheduling, user management, training assignments, reminders, escalations, and compliance reporting—without requiring daily admin logins, and is extended by modular Power-Ups including HootPhish (an interactive, patent-pending phishing training module that teaches users to identify six key indicators of malicious emails), AttackPhish (phishing simulation and scoring), Dark Web Monitoring, CustomHoots (custom video and document training), HootPhish Challenge (gamified leaderboards), and a vCISO advisory service. The platform integrates natively with Microsoft EntraID and Google Workspace for user synchronization, with additional integrations for Microsoft 365 Report Phish, SyncroMSP, Compliance Scorecard, and Perception Point. Headquartered in Portsmouth, New Hampshire, CyberHoot was originally founded in 2014 and rebuilt from scratch in 2019, with the founders cited as bringing over 100 years of collective cybersecurity experience.
The company pursues a multi-motion go-to-market combining product-led growth (a freemium individual tier, free 30-day trial, self-serve autopilot signup at nest.cyberhoot.com, and password-free access), an MSP white-label channel with multi-tenant management and a referral program paying 20% of first-year revenue, and an enterprise direct-sales motion with custom onboarding, role-based training, volume discounts, and API integration. Revenue is generated primarily through per-seat subscriptions with modular Power-Ups add-ons, supplemented by freemium-to-paid conversion and referral commissions, with monthly and annual billing, education/non-profit discounts, and multi-currency support. CyberHoot targets Managed Service Providers, SMBs, and enterprise organizations needing cyber insurance and regulatory compliance, with secondary exposure to educational institutions and individual consumers, and advertises 10+ language support and named customers including the Fellsway Group, Single Digits, Redzone Technologies, CMIT Solutions, Creative Tech, Franklin Schools, and Security Now / Leo Laporte. Recognitions include multiple G2 badges (Best Support, Easiest Admin, Easiest Setup, Easiest To Do Business With, Easiest To Use, High Performer, Best Estimated ROI, Users Love Us), Crozdesk badges, and the American Cyber Awards Start-Up of the Year 2020.
CyberHoot firmographics
Firmographics- Name
- CyberHoot
- Legal name
- CyberHoot
- Website
- https://cyberhoot.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Ownership category
- akta.pro rank
CyberHoot industry classification
Industry- Product category
- Security Awareness Training
- NAICS
- Computer Training (61142), Professional and Management Development Training (61143)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cybersecurity Training & Awareness Programs (BPAEANAF)
- akta.pro secondary industries
- Cybersecurity Learning Platforms (EDAFANAF), Security Awareness & Phishing Simulation (Email/Collab-focused) (HDADAKAJ)
Keywords
Where CyberHoot is headquartered
LocationHeadquarters
- HQ city
- Portsmouth
- HQ country
- United States
- HQ region
- North America
Markets served
CyberHoot business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription - Per Seat: Subscription-based per-seat pricing for security awareness training platform with modular power-ups. Volume-based discounts available for organizations with large numbers of users or clients.
- Freemium Individual Tier: Free foundational training for individuals including six core cybersecurity videos, monthly video updates, quarterly HootPhish training, and dark web monitoring. Paid options available for businesses and clients.
- Referral Commission: 20% commission on referral's first-year revenue for referral partners. Enterprise partners receive bespoke earning structures with industry-leading margins.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Modular subscription with power-ups |
| Freemium | Pay-as-you-go | Free individual training |
| Subscription | Annual | Annual subscription discount |
Go-to-market motion4 records
Distribution channels5 records
Marketing channels8 records
CyberHoot product offering
Product offeringCore offering
CyberHoot is a cloud-based SaaS security awareness training platform that delivers automated, positive-reinforcement cybersecurity training, interactive phishing simulations, and dark web monitoring to businesses, managed service providers, and individuals. The platform includes an Autopilot engine, a patent-pending interactive phishing training module (HootPhish), phishing simulation (AttackPhish), dark web credential scanning, compliance reporting, and modular add-ons for MSP white-label and multi-tenant client management.
Product overview
CyberHoot is a security awareness training platform with a platform-plus-modules architecture. The core product is the Autopilot Platform, which serves as the central automation engine. This platform is complemented by three core training modules: HootPhish (interactive phishing training using positive reinforcement), AttackPhish (phishing simulation and scoring), and Dark Web Monitoring (credential exposure detection). Additional capabilities are delivered through modular Power-Ups add-ons including CustomHoots, Flex Scheduling, Custom Messaging, Custom Reporting, and the HootPhish Challenge gamification feature. The platform also offers a vCISO service for strategic security advisory, White Label branding for MSPs, and Multi-Tenant management for service providers. The Compliance Scorecard provides reporting for regulatory and insurance compliance.
Differentiator
Problem solved
Functional benefit
Brands
- HootPhish: Interactive phishing awareness training module that walks users through real phishing scenarios, highlighting the 6 key indicators of malicious emails. Uses positive reinforcement methodology.
- AttackPhish
- CustomHoots
- vCISO
Products and services
- Autopilot Platform Central automated SaaS platform that schedules, assigns, and delivers security awareness training programs with minimal admin oversight, generating compliance reports and reminders automatically. Designed for businesses, MSPs, and IT administrators managing workforces of any size.
- HootPhish Interactive phishing awareness training module that walks users through real-world phishing scenarios and teaches them to identify the 6 key indicators of malicious emails using gamified, positive-reinforcement methodology. Targets employees and end users in businesses, MSP client bases, and educational institutions.
- AttackPhish Phishing simulation module that sends realistic phishing emails to test employees, ranks and scores individual and team performance, and produces organization-wide readiness reports. Used by security and IT teams to measure and improve security awareness.
- Dark Web Monitoring Automated scanning service that identifies exposed personal data and compromised employee credentials on the dark web, generating actionable alerts and remediation recommendations. Available to businesses, MSPs, and individual users.
- Power-Ups Suite of modular add-on capabilities for the Autopilot platform, including CustomHoots, Flex Scheduling, Custom Messaging, Custom Reporting, and HootPhish Challenge gamification. Customers toggle individual power-ups on or off and pay only for relevant modules.
- vCISO Virtual Chief Information Security Officer service providing expert cybersecurity guidance and strategic security leadership for SMBs and mid-market organizations that lack a full-time CISO.
Quantifiable outcome
- 19% better results with positive approach vs traditional gotcha testing
- +8 more outcomes
Companies that use CyberHoot
Customer profileNamed customers18 records
Segments5 records
Ideal customer profiles5 records
CyberHoot technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration6 records
AI capability3 records
Feature10 records
CyberHoot partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and minor.
- Microsoft EntraIDcoreNative integration with Microsoft EntraID for automated user synchronization, enabling seamless onboarding and training deployment without manual user management. Part of seamless security ecosystem approach.
- Google WorkspacecoreNative integration with Google Workspace for user synchronization and training deployment. Enables organizations using Google to deploy security awareness training effortlessly.
- cybersuiteminorCybersecurity advisory firm partnering to deliver security awareness training solutions. Features case study on CyberHoot website.
- TechRugminorTechnology partner listed on CyberHoot partner page, offering cybersecurity solutions.
- Cyber MulliganminorPartner ecosystem member listed on CyberHoot website.
- eTacticsminorPartner ecosystem member in CyberHoot partner network.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
CyberHoot competitors and assessment
Company assessmentBroad incumbents
- KnowBe4: Market-leading security awareness training platform acquired by Vista Equity Partners for ~$4.2B. Directly comparable product offering (phishing simulation, training, compliance reporting) but at vastly greater scale with thousands of employees and deep enterprise distribution.
- Proofpoint Security Awareness: Enterprise security vendor bundling security awareness training into a broader threat protection suite. Comparable SAT/phishing simulation functionality but typically sold as part of larger enterprise contracts rather than as a standalone product.
- Sophos Phish Threat: Phishing simulation and awareness training module bundled into the Sophos endpoint/network security suite. Comparable phishing simulation features but typically distributed through Sophos partners and bundled pricing, not as a standalone subscription.
- Kaspersky Security Awareness: Security awareness training portfolio including gamified learning and phishing simulations, sold under the Kaspersky umbrella. Comparable product surface area, particularly against CyberHoot's gamified learning features.
Direct peers
- Hoxhunt: Security awareness and phishing simulation platform with a strong emphasis on positive reinforcement, gamification, and personalized adaptive training. Closest philosophical competitor to CyberHoot's positive-reinforcement methodology, though Hoxhunt focuses more on enterprise mid-market.
- Cofense (formerly PhishMe): Phishing simulation and security awareness platform serving enterprise and mid-market customers. Direct competitor in phishing simulation, reporting, and incident response; comparable product surface area to CyberHoot's AttackPhish and HootPhish modules.
- NINJIO: Security awareness training vendor using animated, episodic video content and phishing simulations. Comparable in targeting SMB and MSP channels with episodic content, though NINJIO focuses on Hollywood-style storytelling rather than gamified positive reinforcement.
- Curricula: Security awareness training platform using story-based learning and phishing simulations aimed at SMBs. Comparable in tone (engaging, less punitive) and target buyer (SMB owner/IT lead), competing head-to-head in the small-business SAT market.
Emerging players
- Phished.io: AI-driven phishing simulation and security awareness platform. Comparable product category (automated phishing training) but with a stronger emphasis on AI-personalized learning journeys and a European base.
- SANS Institute: Cybersecurity education and training provider offering awareness programs and technical training courses. Comparable in mission (cybersecurity learning) but focused on deep technical training and certifications rather than recurring SAT SaaS delivery.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
CyberHoot social profiles
Digital presenceCyberHoot compliance and trust
Trust signalCompliance12 records
CyberHoot financial estimates
Financial estimateRevenue estimate
Valuation estimate
CyberHoot leadership team
Management profileNumber of profiles
Profiles7 records
CyberHoot funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CyberHoot M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CyberHoot
What does CyberHoot do?
CyberHoot is a cloud-based SaaS security awareness training platform that delivers automated, positive-reinforcement cybersecurity training, interactive phishing simulations, and dark web monitoring to businesses, managed service providers, and individuals. The platform includes an Autopilot engine, a patent-pending interactive phishing training module (HootPhish), phishing simulation (AttackPhish), dark web credential scanning, compliance reporting, and modular add-ons for MSP white-label and multi-tenant client management.
Is CyberHoot a public or private company?
CyberHoot is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was CyberHoot founded?
CyberHoot was founded in 2014. It employs 1 to 10 people.
Where is CyberHoot based?
CyberHoot is headquartered in Portsmouth, United States, in the North America region.
How does CyberHoot make money?
Three revenue lines are on record. Subscription - Per Seat is the primary driver. The others are freemium Individual Tier and referral Commission.
Who are CyberHoot's main competitors?
Broad incumbents on record are KnowBe4, Proofpoint Security Awareness, Sophos Phish Threat and Kaspersky Security Awareness. Direct peers are Hoxhunt, Cofense (formerly PhishMe), NINJIO and Curricula. Emerging players are Phished.io and SANS Institute.
Does CyberHoot have an API?
Yes. CyberHoot offers an API that enables integrations with third-party platforms and enterprise systems. The API supports automated integrations with tools such as SyncroMSP and enables functionality like the Microsoft 365 Report Phish integration. Developer documentation is at cyberhoot.com/api.
What industry is CyberHoot in?
CyberHoot's product category is Security Awareness Training. Its primary akta.pro industry code is BPAEANAF, Cybersecurity Training & Awareness Programs, with a secondary code of EDAFANAF, Cybersecurity Learning Platforms. Its NAICS code is 61142 and its SIC code is 7372.