Hoxhunt
Hoxhunt sends each employee practice phishing emails matched to their role and skill, rewards them for reporting, and gives security teams a record of how reporting improves over time.
CyberReviewed Editorial Team · Updated · hoxhunt.com
Company details
- Score
- 6.2/10Ranked 11 of 12 (tied)
- Category
- Security awareness
- Founded
- 2016
- Headquarters
- Helsinki, Finland; US office in Minneapolis
- Leadership
- Mika Aalto, co-founder and CEO
- Funding disclosed
- $40 million Series B in 2022
- Pricing
- Per employee, by quote
- Best fit
- Mid-size and large organizations with global, multilingual workforces
Our take
Hoxhunt is a good fit for organizations of several hundred employees or more that want phishing training employees engage with and reporting data security teams can act on. Small companies that only need annual compliance training will likely pay for more than they use.
Scores by criterion
| Criterion | Score |
|---|---|
| Pricing transparency | 4 |
| Product scope and fit | 8 |
| Company durability | 6 |
| Evidence of adoption | 7 |
| Ease of adoption | 6 |
| Overall score (average of the five) | 6.2 |
Each criterion is defined on our methodology page.
Simulations matched to each employee
Hoxhunt sends employees simulated phishing messages adapted to each person's role, language and skill level, rewards them for reporting, and gives short training when they slip.1 The company calls its product human risk management, and says the platform serves 3 million users with 7 million simulations a month across more than 40 languages.1 Its response tools also handle real phishing reports from employees, and its 2025 summer release extended automatic removal of malicious campaigns from inboxes.2
A county contract as a price guide
Hoxhunt prices per employee and gives a quote after a 30-minute scoping call.3 One public record offers a reference point. In November 2023, Klamath County, Oregon, approved a Hoxhunt agreement covering up to 375 users at $15,059.32 for the first year, including a $2,000 implementation fee, and $13,059.32 for each of the next two years, with additional users at $34.82 per user per year.4
Helsinki origins and funding
Hoxhunt was founded in Helsinki in 2016; Dawn Capital lists the founders as Mika Aalto, Pyry Åvist, Karri Kurunmäki and Pasi Salo.5 It raised a $3 million Series A with Dawn Capital in 2018 and a $40 million Series B with New York-based Level Equity Management in 2022.1 Early enterprise customers listed by the company include DocuSign, Airbus, AES, Schindler and Nokia, and it reported 4,284% growth over four years on Deloitte's 2021 Fast 50.1 Gartner listed it as a representative provider in security behavior and culture programs in 2023, according to the company.1
Course libraries and bundled training
Hoxhunt competes with large training libraries that sell on breadth of content and price. Hoxhunt says employees take part more often in its training and that it can show changes in how they handle phishing. IRONSCALES and Huntress both offer training as part of a broader product, which can be enough for smaller organizations; Hoxhunt is the stronger standalone choice where reporting rates and real-threat response matter.
Organizations that need only compliance training
Very small organizations and those that only need a yearly compliance module will get better value from bundled training.
What customers say
Quoted word for word from public reviews on TrustRadius, retrieved October 21, 2026. Each quote links to the review or post it comes from.
Where it helps
Hoxhunt is the first application promoting cyber-security awareness and educating users that actually works for me.
Hoxhunt makes you really evaluate safety and legitimacy of the emails that are received.
Where it falls short
When someone is away and their out of office is active this is not picked up and this causes them to move down in the scoreboard as missed.
I wish you could report emails without having to open them.
