Meet the New Hook: A Rebuilt Platform, the 2026 Annual Training and an MCP Server

Hook Security rebuilt its security awareness training and phishing simulation platform from the ground up for MSPs, released the 2026 Annual Training as a podcast-style season, and is connecting both to the AI tools you already use with a new Hook MCP server.
The training studio and its belief that people are the best defense, not the problem stay the same. Everything around the training got rebuilt.

▶ Watch The New Hook Platform on YouTube (3:28)
What's different? The old Hook vs. the new Hook
| What changed | Before | Now |
|---|---|---|
| Email delivery | Safe-list Hook's IP addresses and domains in every client's mail system. | Direct Delivery for Microsoft 365 and Google Workspace puts simulations straight in the inbox. No safe-listing. |
| Onboarding a client | About 10 times longer per client, by our team's own count. | A readiness checklist takes each client from 0% to done. Microsoft Entra ID or Google Workspace syncs people every night. |
| Turning on Autopilot | Email your Hook rep to turn it on, with little view into what ran. | Turn it on yourself, set the cadence and the audience, preview what's coming, and get a report when it's done. |
| After a click | Education pages varied by template. | Every simulation has its own teaching page that walks through the exact red flags in that email. |
| Reporting | Phishing and training reported separately. | The Security Awareness Snapshot puts both in one report you can schedule monthly. |
| Questions about your data | Pull a report and dig. | Ask the Hook Agent in plain English. |
| Your AI assistant | Copy numbers out by hand. | Connect Claude or another MCP-compatible assistant through the Hook MCP server, arriving with the Hook API in early November. |
| Annual training | 2025: Wilderness Jack: Concrete Jungle. | 2026: a podcast-style season of 10 short episodes. |

What can you do in the new platform today?
All of this is live on the new platform at app.hooksecurity.co:
- Direct Delivery for Microsoft 365 and Google Workspace, so simulations land without safe-listing. How delivery works.
- A readiness checklist for every client account, plus nightly directory sync from Microsoft Entra ID or Google Workspace.
- Autopilot for phishing and training. Pick the cadence and the audience. Preview contacts get a heads-up before an email goes out, and report contacts get the results after. How Autopilot works.
- One invite, many clients. Send a phishing simulation or a training invite across many client accounts at once, and set automations that enroll new people the day they join.
- Teaching pages for every simulation, and every template labeled with the psychological trigger it uses. The research behind the labels.
- The Security Awareness Snapshot, plus preset reports, a metrics explorer and PDF completion certificates. Run a Snapshot.
- The Hook Report button for Outlook, so people can report a suspicious email in one click. Set it up.
- Single sign-on for learners with Microsoft or Google, plus link-based sign-in. SSO guide.
- MSP branding for your clients' experience. Brand it.
- The Hook Agent, which answers questions about your data in plain English. Version 1 is read-only.
- Multi-factor authentication for your Hook account with any authenticator app. Turn it on under Two-Factor Authentication. Shipped October 27.
Several of these turn on when your organization completes its move to the new platform, and Hook support handles that move. There's no switch to flip yourself. MSPs can ask support to move client organizations.

▶ Watch the live demo on YouTube
“There's no more fussing with IP addresses, domains, or anything like that.” — the Hook team, on Direct Delivery
What is the 2026 Annual Training?
The 2026 Annual Training is Hook's yearly security awareness course, rebuilt as a podcast-style season: 10 short, funny episodes on passwords, scams, social engineering, AI and deepfakes. It launched October 16, 2026.
Hook Studios filmed it with real people. No AI-generated video, no cartoons. Every episode teaches Psychological Security (PsySec), so people know before they click, not after.
It's SCORM-compatible, so it runs in the Hook platform or in your own LMS. It joins more than 100 courses in the Hook catalog. Browse the training library.

▶ Watch the trailer on YouTube (1:40)
From a verified G2 review: “The training videos and content are the best in the space.” (Read Hook Security reviews on G2)
What does the Hook MCP server do?
MCP (Model Context Protocol) is the open standard AI assistants use to connect to other software. The Hook MCP server lets Claude, or another MCP-compatible assistant, read your Hook data, so you can ask about any client in plain English instead of pulling a report.
It arrives with the Hook API in early November 2026. The first version is read-only: reports and MSP billing breakdowns, through API keys you create in the platform. A key sees what its organization's admins can see.

What MSPs will be able to ask:
- “Which clients have the lowest training completion this quarter?”
- “Summarize Client A's last three phishing simulations for Thursday's QBR.”
- “Break down my Hook seats by client for this month's invoices.”
Hook has 13 live integrations today, with ConnectWise, Autotask and HaloPSA integrations coming soon.
How do I get the new Hook?
- Already a Hook customer or partner? Sign in at app.hooksecurity.co. To move your organization fully onto the new platform, email support@hooksecurity.co.
- An MSP? See how Hook works for MSPs, then book a demo.
- Just curious? See it in action.

▶ Watch the bloopers on YouTube
Frequently asked questions
Do I still need to safe-list Hook's IP addresses?
Not with Direct Delivery for Microsoft 365 or Google Workspace. Traditional email delivery is still available, with the IP addresses listed in the portal.
Can the Hook Agent make changes for me?
Not yet. Version 1 is read-only: it answers questions from your data. Taking actions, like inviting people to training, comes next.
When can I connect Hook to Claude or another AI assistant?
The Hook MCP server arrives with the Hook API in early November 2026. The first version is read-only and uses API keys you create in the platform.
Can I run the 2026 Annual Training in my own LMS?
Yes. It's SCORM-compatible, so it runs in the Hook platform or in your own LMS.
Is the new platform built for MSPs with many clients?
Yes. It was rebuilt mainly for MSPs: manage every client from one portal, send one simulation or training invite to many clients at once, and resellers can create multiple levels of MSP accounts.
Training courses on this topic
From Hook Security’s security awareness training library.
- 40 minThe Too Late Show Annual TrainingHook Security's premier training is back. Grab a snack and get ready to laugh. The Too Late Show with host Kimberly Caine has games, guests, and a few extra surprises! Covering topics such as social engineering, passwords, safe web browsing, malware, and more!
- 22 minAnnual Training with Wilderness JackAnnual Training with Wilderness Jack - Security awareness training featuring outdoor survival analogies for cybersecurity concepts.
- 30 minAnnual Training with...StevenThis year, we took cybersecurity training up a notch. From learning why cybersecurity matters to spotting the latest in digital threats, our annual training dives deep—and keeps it entertaining.
Ready to Strengthen Your Security Culture?
See how Hook Security can help protect your organization.