Author
Zach Eikenberry
CEO, Hook Security
Zach Eikenberry is co-founder and CEO of Hook Security, where he developed the PsySec approach behind its training, and author of Psychological Security: How Human Behavior Shapes Modern Cyber Defense. He previously served as executive director of two public high schools and a middle school.
121 articles by Zach Eikenberry
Hook Security vs Proofpoint: An Honest Comparison for MSPs and SMBs (2026)
How to Run Phishing Simulations for MSP Clients
Hook Security vs CybSafe: An Honest Comparison for MSPs and SMBs (2026)
Hook Security vs Hoxhunt: An Honest Comparison for MSPs and SMBs (2026)
Meet the New Hook: A Rebuilt Platform, the 2026 Annual Training and an MCP Server
How to Measure If Security Awareness Training Is Working
Security Awareness Training That Employees Don't Hate
Spam vs. Phishing: Junk Email Examples and How to Tell Them Apart
What separates spam from phishing, with examples of each and the right way to report both.
Phishing Simulation Tools: 8 Compared for MSPs and SMBs (2026)
Human Risk Management Platforms: 7 Compared for MSPs and SMBs (2026)
The Claims Pointed at People: Nick Wolf on Tate Talks (S13E2)
Hook Security VP of Sales Nick Wolf joined The MSP Podcast for Season 13, Episode 2 of Tate Talks.
Email Spoofing Examples: 6 Spoofed Emails and How to Spot Them
Six ways attackers fake the sender of an email, with an example of each and the check that catches it.
Phishing Simulation Click Rate Benchmarks: 33%, 5%, or 4%? Why They Disagree
AI Visibility Benchmark: Which Security Awareness Training Vendors Do AI Assistants Name? (October 2026)
A public benchmark of which security awareness training vendors an AI assistant names for 8 common MSP and SMB buyer questions, measured October 15, 2026.
The Cyber-Insurance Evidence Small Businesses Actually Need from Security Awareness Training
What cyber-insurance carriers actually ask small businesses about security awareness training, and the five records to have ready before you apply, renew, or file.
Hook Security vs CanIPhish (2026): An Honest Comparison for MSPs
A sourced comparison of Hook Security and CanIPhish for MSPs: managed program vs self-serve simulation, training, measurement, pricing transparency and switching.
Hook Security vs Breach Secure Now: An Honest Comparison for MSPs (2026)
A fair, sourced comparison of Hook Security and Breach Secure Now (BSN) for MSPs: the BSN bundle, scoring vs coaching, reviews, and what switching takes.
Should You Punish Employees Who Fail Phishing Simulations?
How Do I Get Employees to Report Phishing Emails?
Hook Security vs Webroot SAT: An Honest Comparison for MSPs (2026)
A fair, sourced comparison of Hook Security and Webroot (OpenText) Security Awareness Training for MSPs: G2 scores, the 2017-era methodology question, and switching.
How to Audit Your MSP's Security Awareness Training Program in 30 Minutes
Use this seven-question, 30-minute checklist to quickly audit your MSP’s security awareness training (SAT) program, spot operational gaps, and decide whether your current platform is truly on autopilot or quietly burning out your team.
Hook Security vs Huntress SAT: An Honest Comparison for MSPs (2026)
A fair, sourced comparison of Hook Security and Huntress Managed SAT for MSPs: G2 scores, training style, the EDR tie-in, pricing for small clients, and switching.
Play the Cybersecurity Awareness Party: A Free Team Game from Hook Security and CrowdParty
How to Sell Security Awareness Training to SMB Clients in 2026
In 2026, MSPs win security awareness training deals by selling measurable behavior change, not just compliance. Learn the four-part sales conversation, how to handle budget objections, and how to position SAT as the most visible proof of value in your security stack.
HCCRA Readiness Kit for MSPs: Checklist, Client Email, and Talk Tracks
Everything an MSP needs to start the Health Care Cybersecurity and Resiliency Act conversation with healthcare clients: a 12-point checklist, a ready-to-send email, QBR talk tracks, and a grant eligibility screen.
The Health Care Cybersecurity and Resiliency Act: What It Means for MSPs
S. 3315 passed the Senate on September 30, 2026. Here's what it requires of HIPAA covered entities and business associates, and how MSPs can help healthcare clients get ready.
HookMinute Is Back: A Free Daily Phishing Game for Teams
How to Onboard a New Security Awareness Training Client in Under 5 Minutes
Most MSPs burn 6–10 hours onboarding each new security awareness training client. With a done-for-you, MSP-first platform and a tight process, you can get a new SAT client fully live in under 60 minutes of MSP time. Here’s the exact flow, what slows teams down, and how to fix it.
Introducing PsySec.io: Open Research on Psychological Security
Hook Security vs Phin: An Honest Comparison for MSPs (2026)
A fair, sourced comparison of Hook Security and Phin for MSPs: G2 scores, training content, coaching at the click, reporting, pricing, and what switching involves.
The MSP's Buying Guide: What to Look for in a Security Awareness Training Platform in 2026
Security awareness training is now a must-have for MSPs, but most platforms were built for enterprises, not service providers. This guide breaks down seven criteria that separate true MSP-grade SAT platforms from repackaged enterprise tools, and shows how to evaluate vendors on operational fit, not just feature lists.
The Reporting Race: Why Your Click Rate Isn't the Number That Matters
Hook Security vs BullPhish ID: An Honest Comparison for MSPs (2026)
A fair, sourced comparison of Hook Security and BullPhish ID for MSPs: reviews, training philosophy, coaching at the click, pricing transparency, and what switching actually involves.
Hook Security vs usecure (2026): An Honest Comparison for MSPs
A fair, sourced comparison of Hook Security and usecure for MSPs: reviews, content engagement, the people-scoring question, reporting, pricing transparency, and what switching involves.
How MSPs Use Security Awareness Training to Win Cybersecurity Renewals
Learn how MSPs turn security awareness training into their strongest renewal lever by showcasing visible behavior change, data-driven trend charts, and a clear roadmap for the coming year—while avoiding the common mistakes that weaken renewal conversations.
Phishing Simulation Templates: 17 Proven Examples by Category
Seventeen proven phishing simulation templates in five groups: delivery notices, account alerts, gift cards and freebies, internal HR messages, and collaboration invites, plus how to rotate them.
Social Media Phishing Templates: 3 Examples and How to Spot Them
Three proven social media phishing templates, Venmo, LinkedIn, and X (Twitter), with the red flags for each and how to train employees to check in the app instead of the inbox.
Healthcare Phishing Templates: 3 Examples and How to Train for Them
Three proven healthcare phishing templates with the red flags to teach, why healthcare is targeted, and how phishing simulations support HIPAA security awareness training.
Free Cybersecurity Awareness Month 2026 Kit for MSPs and IT Teams
Hook Security's free Cybersecurity Awareness Month 2026 kit: one 6 MB download with posters, social graphics, infographics, tip sheets, emails, blog posts, a rollout calendar, and an AI-ready deploy playbook.
Multi-Tenant Security Awareness: What MSPs Actually Need from a Platform
Most “MSP-ready” security awareness tools are single-tenant platforms with MSP features bolted on. This guide explains what true multi-tenant architecture looks like for security awareness training, how to spot bolt-on MSP tiers in demos, and why the difference determines whether your SAT service line scales profitably.
You Can't Spell Training Without AI: Nick Wolf on KnowTechTalk
Nick Wolf joined host Barb Paluszkiewicz on KnowTechTalk to talk AI-written phishing, why typo-spotting is done, and how MSPs get people to report a click fast.
What Is Co-Managed Security Awareness Training?
Co-managed security awareness training is a hybrid model where MSPs own program design and strategy while the vendor automates delivery, execution, and reporting. This guide explains how responsibilities split, when co-managed makes sense, and how it compares to self-service and fully managed models.
Self-Service vs Done-for-You Security Awareness Training: Which Model Fits Your MSP?
For MSPs, the real decision in security awareness training isn’t which vendor to choose—it’s whether to run a self-service platform in-house or partner with a done-for-you provider. This guide breaks down how each model impacts margin, scalability, and client retention so you can pick the approach that fits how your team actually operates.
Human Risk Management vs PsySec: What the Research Actually Says
Human risk management is the right diagnosis and, in most products, the wrong prescription. What the largest independent phishing study found about the simulate-and-score loop — and what it found does work.
Security Awareness Training Glossary: 25 Terms Every MSP Should Know in 2026
A practical 25-term glossary for MSPs covering security awareness training models, phishing simulations, training delivery, platform architecture, and MSP business terms—built from Hook Security’s work with 500+ MSP partners.
5 Signs It’s Time to Replace Your MSP’s Security Awareness Training Vendor
Most MSPs stay with the wrong security awareness training vendor longer than they should because migration feels painful. Here are five clear signs your SAT platform is holding back your operations, client relationships, and growth—and how to evaluate a better-fit replacement in under an hour.
Five G2 Badges in One Report: Thank You to the Teams Who Actually Use Hook
Hook Security earned five G2 Fall 2026 badges, all computed from verified user reviews: High Performer, High Performer (Mid-Market), Best Support (Mid-Market), Easiest To Do Business With (Mid-Market), and Best Meets Requirements (Mid-Market). It is Hook’s fifth G2 High Performer recognition since the Winter 2022 report.
The Anatomy of Manipulation: What 691 Phishing Emails Taught Us About Trust
Why MSPs Should Stop Selling Phishing Simulations and Start Selling Behavior Change
In 2026, phishing simulations are a commodity. MSPs that keep selling them as the product get stuck in feature wars, checkbox programs, and risky renewals. The MSPs winning on margin and retention now sell behavior change as the product — with phishing simulations, training, and reporting positioned as mechanisms that deliver measurable human-risk improvement.
The MSP's Guide to Running Security Awareness on Autopilot
MSPs: Run security awareness without the busywork. Learn the Plan-Launch-Nudge-Prove-Improve framework for autopilot awareness training.
What Is a Managed Security Awareness Program? An MSP-Focused Definition
Learn what a managed security awareness program really is from an MSP perspective, how it differs from self-service and co-managed SAT, what genuine managed delivery includes, and how Hook Security’s Security Awareness on Autopilot model helps MSPs scale with predictable margins and better client retention.
The MSP’s 15-Minute QBR Template for Reporting Security Awareness Results
A five-section QBR template for reporting security awareness results to clients in 15 minutes — metrics, narrative, and next quarter's plan.
What Done-for-You Security Awareness Training Means in 2026
Five tests that separate genuinely done-for-you security awareness training from marketing copy — onboarding, reporting, and support standards for MSPs.
The 12-Month Security Awareness Calendar Every MSP Should Steal
A 12-month security awareness calendar for MSPs: monthly training themes, phishing simulations, and a QBR rhythm you can run for every client.
How to Price Security Awareness Training for Your MSP Clients: 4 Models That Work
Four pricing models MSPs actually use for security awareness training in 2026, with honest economics, margin math, and when each model fits.
The MSP Security Awareness Stack in 2026: What “Good” Actually Looks Like
What a good MSP security awareness stack looks like in 2026: five operational dimensions, honest benchmarks, and where average stacks leak margin.
Best Security Awareness Training for MSPs (2026)
The 9 best security awareness training platforms for MSPs in 2026, compared on multi-tenant management, margin, admin time, and engagement.
Best Security Awareness Training for Small Business (2026)
The best security awareness training for small business in 2026, compared on price, admin time, and completion.
What Is Psychological Security (PsySec)? Why Psychology Beats Fear in Security Training
What psychological security (PsySec) is and why psychology beats fear in security awareness training — the science behind Hook's methodology.
Security Awareness Training Statistics 2026: 25 Verified Numbers (and 3 We Refuse to Cite)
25 verified security awareness and phishing statistics for 2026 - every number sourced to a primary report, plus 3 famous stats we refuse to cite (and why).
Cyber Insurance and Security Awareness Training: What MSPs Need to Know in 2026
What cyber insurance carriers require from security awareness training in 2026 — application questions, underwriting thresholds, and documentation MSPs need.
Phishing Simulation for MSPs: How to Evaluate Simulators for Your Service Stack
The Cleverest Phishing Scam We’ve Seen in a While Hit Our Sales Team Last Week
Why SAT Programs Fail After Month 2 (And How MSPs Keep Them Running All Year)
Common Email Scams: 10 Examples and How to Spot Each One
Ten common email scams, what each one says, the one detail that gives it away, and how to report it.
Unlock Compliance and Security Awareness Training with Hook Security's 2024 Training Catalog
Hook Security’s 2024 Training Catalog introduces over 20 new modules and an annual course with 12+ micro-trainings, blending innovative approaches like PsySec (Psychological Security), interactive storytelling, and just-in-time learning to elevate security awareness. These new offerings provide tailored, engaging compliance and cybersecurity training, empowering employees to proactively protect against evolving threats.
Hook Security Partners with Haekka to Bring Cybersecurity Training Directly to Slack Users
Hook Security and Haekka bring security awareness training directly into Slack — micro-training where your team already works, no separate portal.
Navigating Deepfakes: A 2025 Conference on the Future of Social Engineering
Join the February 2025 Orlando conference addressing deepfakes' role in social engineering, offering insights, tools, and strategies for detecting and defending against digital manipulation.
Why Hook Security Signed the Truth in Cyber Pledge
Hook Security recently made the decision to sign the "Truth in Cyber" pledge, a move that underscores our commitment to fostering transparency and trust in the cybersecurity industry.
Trust-Building Activities for Creating a Strong Security Culture
In this blog post, we're exploring some dynamic trust-building activities that can strengthen trust within your team and foster a security-first mindset.
9 Workplace Security Tips to Keep Your Organization and Employees Protected
Nine workplace security tips: access control, passphrases and MFA, employee training, network defenses, physical security, audits, and incident response.
Introducing Tech Stack Tips: The Ultimate Solution for Optimizing and Securing Your Tech Infrastructure
Introducing Tech Stack Tips - our brand new training series designed to supercharge productivity and enhance security across your organization's tech infrastructure!
KnowBe4 Alternatives: 10 Best Picks for MSPs and SMBs (2026)
Looking for a KnowBe4 alternative? Honest 2026 comparison of 10 security awareness training platforms for MSPs and SMBs — strengths and watch-outs.
Free Ebook! Off The Hook: A Practical Guide to Spotting and Avoiding Phishing Threats
Introducing our latest free resource: "Off The Hook: A Practical Guide to Spotting and Avoiding Phishing Threats." Offering a deep dive into the murky waters of phishing scams and attacks.
10 Phishing Awareness Tips for Employees
Phishing awareness is an employee's ability to spot a phishing message, verify it and report it. These ten tips are the habits to teach first.
How Cross-Functional Collaboration Boosts Your Organization’s Security
In this blog post, we discuss the importance of cross-functional collaboration and how it can boost an organization’s security posture.
How to Deploy an Effective Security Awareness Training Program in Schools
In this blog post, we dive into the realities of deploying a Security Awareness Training initiative in schools and offer recommendations to kickstart security initiatives!
Free Security Awareness Training for Employees: 6 Tools and Games
In this blog post, we explore some free game-changing tools you can incorporate into your security programs.
The 5 Most Common Phishing Techniques of 2023 and How to Prevent Them (With 2024 Forecast)
In this blog post, we dive into the most prevalent phishing techniques of the year and explore strategies to safeguard against them.
A Guide to Measuring Your Security Awareness Training Program Culture
In this blog post, we'll delve into practical strategies and key performance indicators that will help you qualitatively assess the impact of your security awareness initiatives.
The Importance of Teaching Cybersecurity Psychology to Employees
In this blog post, we'll explore the pivotal role of teaching cybersecurity psychology to employees and dive into why it matters in safeguarding organizational integrity.
How Security Awareness Training Drives Employee Productivity
We dive into the relationship between security awareness training and employee productivity. We explore how a well-structured and comprehensive training program can serve as a stepping stone for a more vigilant, informed, and ultimately productive workforce.
Introducing Hook Studios: The Ultimate Resource for Security Awareness Professionals
Introducing Hook Studios, our brand-new, absolutely free content hub created specifically for security awareness professionals!
How to Train Employees on Malware Prevention
In this blog post, we dive into the key steps involved in training employees on malware prevention.
Physical Security Training for Employees: What to Teach
What physical security training for employees should cover, from tailgating and visitor badges to clean desks and lost laptops, and how to make the habits stick.
How to Train Employees on Phishing Awareness: A Step-by-Step Guide
How to train employees on phishing awareness: realistic simulations, positive coaching instead of punishment, and micro-training that people actually finish.
Beneath The Surface: A Guide to Phishing Emails and the Creatures Behind Them
Dive into the depths of the cyber ocean and explore the treacherous world of phishing scams and attacks with “Beneath The Surface: A Guide to Phishing Emails and the Creatures Behind Them.” We’ll take you on an underwater adventure, where you’ll encounter a wide array of sea creatures that serve as metaphors for different types of phishing scams and attacks.
Hook Security Closes Seed Round Led by TampaBay.Ventures
Hook Security closed a seed round in May 2023 led by returning investor TampaBay.Ventures, with DeepWork Capital, Stout Street Capital and individual investors participating.
How to Train Employees on Social Engineering: A Step-by-Step Guide
To counteract the impact of social engineering attacks, employee training programs are essential for creating a secure work environment. In this article, we will discuss step-by-step how to train employees on social engineering techniques.
Phishing For Answers: How to Avoid Malware
Phishing for Answers is a video series answering common questions about phishing, ransomware, cybersecurity, and more. These videos are great to share with your colleagues, friends, and family! Today we’re talking about malware.
How to Train Employees on Incident Response: A Step-by-Step Guide
How to train employees on incident response: what to report, who to tell, response playbooks, and practice drills that make reporting a reflex.
Webinar: Culture and Compliance with Hook Security and ByteChek
Webinar featuring Hook Security and ByteChek. What it means to build a healthy security awareness training culture.
Hook Security Wins Judges' Choice at the 2022 NEXT Venture Summit
Hook Security won Judges' Choice at the 2022 NEXT Venture Summit in Greenville, beating nine other finalists and earning an automatic spot to pitch at Venture Atlanta.
The 10 Most Common Phishing Emails of 2021
Because hackers are consistent with the way they intricately develop new scams, knowledge concerning popular phishing scams is paramount. When we combine the characteristics of a typical phishing email and supply the information regarding standard phishing email content, we're preparing employees and consumers to avoid data theft. In this article, we take a look at the most common phishing emails of 2021.
Phishing For Answers: What is Smishing?
Phishing for Answers is a video series answering common questions about phishing, ransomware, cybersecurity, and more. These videos are great to share with your colleagues, friends, and family! Today we’re talking about smishing.
Phishing For Answers: Internal Phishing Emails
Phishing for Answers is a video series answering common questions about phishing, ransomware, cybersecurity, and more. These videos are great to share with your colleagues, friends, and family! Today we’re talking about internal phishing emails.
7 Signs You Should Invest in Phishing Training
Phishing training is only one aspect of security awareness training, but it’s arguably the most important cybersecurity training you can deliver to your employees. Not only is it a relatively simple concept to understand, but it’s also the most likely form of attack your employees will see regularly. Here’s how to tell if it’s time to invest in phishing training for your organization.
Phishing Testing for Employees: Why It Pays to Phish Employees
Phishing testing for employees is essential in that it ensures employees can adequately spot and avoid complicated phishing attacks. When accompanied with an instant training moment, sending employees phishing tests can help your users become more aware of popular phishing tricks and tactics.
14 Common Misconceptions About Security Awareness Training
Security awareness training is one of the best ways to fight cybercrime. But, some organizations and employees haven’t embraced this solution. This situation is due, in part, to a lack of understanding about cybersecurity education in the workplace.
Phishing For Answers: Website Phishing
Phishing for Answers is a video series answering common questions about phishing, ransomware, cybersecurity, social engineering, and more. These videos are great to share with your colleagues, friends, and family! Today we’re talking about website phishing.
What to Do if You Click on a Phishing Link
Realizing that you have been a victim of phishing is a terrifying experience. Phishing has rapidly evolved over the last decade, which means that these attacks have become more sophisticated than ever. They allow attackers to gain confidential information which could put your personal and business finances and data at great risk.
Phishing For Answers: The Most Dangerous Form of Malware
Phishing for Answers is a video series answering common questions about phishing, ransomware, cybersecurity, and more. These videos are great to share with your colleagues, friends, and family! Today we’re talking about malware.
Phishing For Answers: What is Spear Phishing?
Phishing for Answers is a video series answering common questions about phishing, ransomware, cybersecurity, and more. These videos are great to share with your colleagues, friends, and family! Today we’re talking about spear phishing.
How to Wreck your Company's Culture with One Bad Phishing Test
In this blog, we’ll walk you through some real-world examples of companies who sent these types of phishing emails to their employees and how to not follow in their footsteps.
Phishing For Answers: How Social Media Affects Your Digital Security
Phishing for Answers is a video series answering common questions about phishing, ransomware, cybersecurity, and more. These videos are great to share with your colleagues, friends, and family! Today we’re talking about how social media affects your digital security.
Compliance Training: 5 Key Questions You Should Always Ask Before Buying It
Five key questions to ask before buying compliance training: coverage, format, tracking, updates, and engagement — so you choose training employees finish.
The 10 Worst Phishing Fails of All Time and How They Could Have Been Prevented
With phishing attacks growing in scale and sophistication, they are becoming more difficult to detect and even harder to evade. The most dangerous mindset is thinking that it can’t happen to you or that you would recognize one of these attacks. Today’s sophisticated attackers craft legitimate-looking targeted phishing campaigns designed to hook even the most seasoned user. Here are 10 real-world phishing attacks that could have been prevented.
5 Holiday Phishing Scams to Look Out for This Year
The holiday season is rife with opportunities for cybercriminals to make a quick buck, so it's important to be on your guard. While the specifics of phishing attempts often change every year, here are the most common holiday phishing scams that target small businesses during the holiday season.
5 Myths About Security Awareness Training
Cybercrime is growing at an alarming rate, and a key element of any company's cyber defense strategy should be security awareness training. However, training is often not effective because of various myths and misconceptions. So we've outlined some of the top misconceptions when it comes to security awareness training.
SCRA's SC Launch Makes Second $250K Investment in Hook Security
SCRA's SC Launch program made a second $250,000 investment in Hook Security, bringing its total commitment to $500,000. The check was presented at DIG SOUTH on August 24, 2021.
10 Security Awareness Training Best Practices
As a security professional, one of your responsibilities is to ensure that the personnel in your company are aware of cyber threats and how they can be avoided. It's important for you to provide awareness training on a regular basis, but when it comes down to it, people will need reminders throughout the year. So here's a list of 10 best practices you should use in your security awareness training:
Hook Security Joins Tampa Bay Wave's First CyberTech|X Accelerator
Tampa Bay Wave picked 15 startups for its first CyberTech|X Accelerator cohort in January 2021. Hook Security was one of them.
How to Write a Security Training Notice
How to communicate the seriousness of cybersecurity with employees while also encouraging a healthy security awareness culture.
Hook Security Launches PsySec Advanced Security Awareness Training
Hook Security launched PsySec Advanced in September 2020, replacing once-a-year annual training with a baseline course plus one short, funny video course every month.
5 Cybersecurity Myths That May Be Putting your Business at Risk
Like many things, cybersecurity has some misconceptions out there. But believing in these myths could come at a cost. With the number of breaches growing, The right tools in place and a security awareness training program could help in protecting you, your employees, and your company. So here are 5 cybersecurity myths that may be putting your business at risk for a breach.
Cold Email Tips for MSPs in 2020
The goal of this article is to help Hook Security’s partner MSPs benefit from my sales team’s experience with a tactic we’re all familiar with: cold-emailing.
Avoid These Holiday Phishing Scams
The holiday season is upon us, which unfortunately also means that it’s high season for cybercrime. The top threat for small businesses this time of year is phishing.
The MSP's Guide to Lead Generation
When looking to drum up new business for your MSP, you may often look toward one thing: lead generation.“Where is my next customer coming from?” you may ask. Lead generation is not the end-all-be-all of your sales and marketing efforts, but it’s certainly a great place to start.
Why Edutainment is the Key to Successful Security Awareness Training
In a world where over 90% of security breaches involving a phishing element, a company’s employees become the most vulnerable piece but also the greatest asset in security. Technical tools can only be so successful, and it’s up to your employees to recognize the threat. Security awareness training can help.
Local SEO for MSPs: A Practical Guide to Ranking Locally
Local SEO for MSPs is the work of getting your managed services business to show up when nearby companies search for IT help, both in the map results and in the regular listings. It comes down to four things: a complete Google Business Profile, pages that use the words local buyers search, steady reviews, and useful content.