CISO Tribune

Vendor comparison · 2 companies

Hoxhunt vs Reflex Security

Hoxhunt sells an AI-powered platform that automates security awareness and phishing training with personalized training for employees. Reflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit. CISO Tribune files both under Security awareness training. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Hoxhunt
  • Reflex Security
Hoxhunt vs Reflex Security: Products, Customers and Funding Compared
HoxhuntHoxhunt sells an AI-powered platform that automates security awareness and phishing training with personalized training for employees.hoxhunt.comReflex SecurityReflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit.reflexsecurity.io
What it sells
  • Adaptive Phishing Training[7]Personalized phishing training for employees.
  • Reflex[1][2][3]A crisis simulation platform that builds a live crisis from a team's real environment and adapts to each decision the team makes.
Categories
Headquarters
Helsinki, Finland[3]Not stated on its pages
Founded
2016[1]Not stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 21, 2026Hoxhunt announced Secure Behavior Detection and Response, a product that turns fragmented security signals into a view of risky behavior.[13]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[10]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Hoxhunt sells mainly to global organizations that train large workforces of employees. Hoxhunt says its AI and behavioral data let security teams personalize training at scale with less manual work. SOC teams are addressed by its response automation, which suppresses safe, duplicate, and low-risk reports. Organizations with compliance needs can use regulatory tracks for PCI DSS, HIPAA, DORA, and GDPR. Hoxhunt says training can reach frontline staff, contractors, and the board.Not written yet
Last verified
September 27, 2026November 5, 2026

Where they overlap

  • Hoxhunt and Reflex Security are both filed under Security awareness training.

Where they differ, field by field

  • Hoxhunt's primary category is Human risk management; Reflex Security's is Breach simulation and automated pen-testing.
  • Reflex Security is also filed under Incident response and forensics.
  • Hoxhunt lists Adaptive Phishing Training. Reflex Security lists Reflex.
  • Hoxhunt is headquartered in Helsinki, Finland.
  • Hoxhunt was founded in 2016.

What it sells: Reflex Security

What Reflex does[1][2][3]
Reflex builds a tailored scenario in minutes, catered to the real environment, tools and threats of the team. The team works a live breach while an adaptive adversary and pressured stakeholders push back in real time. AI agents play every side of the breach and react to each call the team makes.

Questions about Hoxhunt and Reflex Security

What do Hoxhunt and Reflex Security sell?
Hoxhunt sells Adaptive Phishing Training. Reflex Security sells Reflex.
Are Hoxhunt and Reflex Security in the same category?
They share Security awareness training. Hoxhunt's primary category is Human risk management and Reflex Security's is Breach simulation and automated pen-testing.
Where are Hoxhunt and Reflex Security headquartered?
Hoxhunt is headquartered in Helsinki, Finland.
When were Hoxhunt and Reflex Security founded?
Hoxhunt was founded in 2016.
Who are Hoxhunt and Reflex Security sold to?
From its own pages, Hoxhunt sells mainly to global organizations that train large workforces of employees.
What have Hoxhunt and Reflex Security announced recently?
October 21, 2026: Hoxhunt announced Secure Behavior Detection and Response, a product that turns fragmented security signals into a view of risky behavior.

About Hoxhunt

Hoxhunt sells an AI-powered platform that automates security awareness and phishing training with personalized training for employees.[5][6][7]

Hoxhunt says its platform delivers phishing simulations across email, SMS, phone calls or Teams, personalized to each employee based on department, location and more. Instant micro-trainings follow the simulations. Hoxhunt provides a library of customizable training packages, and training can be generated with AI.[5]

Hoxhunt creates an individual learning path for each employee. Simulated phishing campaigns are selected based on skill level, role, location and previous behavior. Employees receive gamified simulations and interactive training roughly every 10 days. Simulations span email, smishing, vishing and callback, Microsoft Teams, and deepfake. Hoxhunt simulates executive-impersonation and payment-approval scams with AI-generated or cloned voices. Hoxhunt can send simulated phishing messages inside Microsoft Teams and other collaboration tools.[7]

Hoxhunt delivers security awareness training as short lessons in small, regular bursts. Hoxhunt includes 300+ ready training modules in video and text, plus regulatory tracks for PCI DSS, HIPAA, DORA, and GDPR. Content Studio lets customers create their own training by turning policies, procedures and existing materials into training in under 60 seconds. Nothing reaches employees until the customer publishes it. Training can be localized in 40+ languages. Hoxhunt says training can reach frontline staff, contractors, and the board with XSAT, with no account required.[6]

On the response side, Hoxhunt investigates reported emails, groups them into a single incident, and removes the campaign across every inbox automatically. Hoxhunt pulls in threat intelligence from 5 million reporters worldwide. Hoxhunt says it classifies reported emails with 96% accuracy for malicious emails and more than 99% for safe emails. Hoxhunt suppresses safe, duplicate, and low-risk reports so the SOC can spend less time reviewing noise. Hoxhunt says the product can reduce phishing tickets by up to 99%.[2]

For risk beyond email, Hoxhunt organizes events from Hoxhunt and third-party tools into behavioral patterns at the employee, team, and organizational level. Hoxhunt combines signals from Hoxhunt, Microsoft Defender, CrowdStrike, Zscaler, and other sources into a unified behavioral view. Customers can ingest events from internal systems and proprietary tools through a flexible API. Hoxhunt can trigger coaching, policy reminders, training, or escalation based on behavior.

Hoxhunt says hundreds of global organizations use it to train millions of employees. Hoxhunt reports millions of users across 129+ countries. Customers named on its pages include DocuSign, Airbus, AES, Schindler and Nokia. Hoxhunt says Avanade saves over 900 hours of SOC analysis per month with Hoxhunt. Hoxhunt says 60% of employees report at least 1 real attack within the first year of training.[6][11]

Hoxhunt raised a Series B of $40 million with New York-based Level Equity Management. Hoxhunt raised a $3 million Series A with Dawn Capital, and Icebreaker took part. Hoxhunt operates on a SOC 2 Type II audited platform with GDPR and CCPA compliance, encryption in transit and at rest, and strict access controls. Hoxhunt has a dedicated Compliance and Security staff, and SOC2 and SOC3 reports are available for customers and prospects on request. Hoxhunt prices per employee, with the quote depending on employee count and the capabilities needed. Hoxhunt onboarding starts with connecting an identity provider, importing users and picking a launch date, and Hoxhunt says most teams are live in under two weeks.[2][4][5][6][7][12]

Hoxhunt on the record

Sources

Hoxhunt full record

  1. [1]About - HoxhuntHoxhunt · undated page, accessed September 27, 2026 · Tier A
  2. [2]How it worksHoxhunt · hoxhunt.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Hoxhunt raises 40m to solve the hardest part of cybersecurity people,c3577495Hoxhunt via Cision · news.cision.com · published May 31, 2022 · Tier A
  4. [4]Pricing - HoxhuntHoxhunt · undated page, accessed October 25, 2026 · Tier A
  5. [5]The Hoxhunt Human Risk Management PlatformHoxhunt · undated page, accessed October 25, 2026 · Tier A
  6. [6]Security Awareness Training for Employees | #1 G2 RecommendedHoxhunt · undated page, accessed October 25, 2026 · Tier A
  7. [7]No.1 Phishing Training for Employees | HoxhuntHoxhunt · undated page, accessed October 25, 2026 · Tier A
  8. [8]Phishing Email Incident Response Automation| HoxhuntHoxhunt · undated page, accessed October 25, 2026 · Tier A
  9. [9]Secure Behavior Detection and ResponseHoxhunt · undated page, accessed October 25, 2026 · Tier A
  10. [10]Hoxhunt Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 25, 2026 · Tier C
  11. [11]Why Go With Us? - HoxhuntHoxhunt · undated page, accessed November 3, 2026 · Tier A
  12. [12]Our Security - HoxhuntHoxhunt · undated page, accessed November 3, 2026 · Tier A
  13. [13]Hoxhunt launches Secure Behavior Detection and Response to turn human risk signals into lasting behavior changePR Newswire · published October 21, 2026 · Tier A

Reflex Security full record

  1. [1]reflexsecurity.ioReflex Security · reflexsecurity.io · undated page, accessed November 5, 2026 · Tier A
  2. [2]How ai powered tabletop exercises improve incident response readinessReflex Security · reflexsecurity.io · undated page, accessed November 5, 2026 · Tier A
  3. [3]Reflex SecurityReflex Security · undated page, accessed November 10, 2026 · Tier A
  4. [4]Reflex Security Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.