Security Awareness Blog

Tips, insights, and best practices to help you build a security-first culture.

The new Hook is here: a rebuilt platform for MSPs, the 2026 Annual Training and the Hook MCP server

Meet the New Hook: A Rebuilt Platform, the 2026 Annual Training and an MCP Server

PinnedOct 27, 2026Zach EikenberryRead more

Illustration of a magnifying glass inspecting email envelopes on a computer screen, representing checking an invoice email for scam red flags

Fake Invoice Emails: 6 Real Examples and How to Spot Them

Got an invoice you don't recognize? See 6 fake invoice emails written out, the red flags in each, and what to do if you already clicked or paid.

Nov 5, 2026Zach EikenberryRead more

Free security policy templates for 2026: awareness training, acceptable use, passwords and MFA, access control, payment verification, remote work, incident response and security program

Free Security Policy Templates: 8 Ungated Policies for US Small Businesses (2026)

Nov 5, 2026Zach EikenberryRead more

Ask your AI assistant about your security awareness program

Ask your AI assistant about your security awareness program

Nov 4, 2026Parker ByrdRead more

Best security awareness training platforms for US businesses in 2026: Hook Security, KnowBe4, Proofpoint, Hoxhunt, usecure, Huntress, NINJIO and Microsoft

Best Security Awareness Training Platforms: 8 Compared for US Businesses (2026)

Nov 4, 2026Zach EikenberryRead more

How often to run phishing simulations: training gains are strong at first, still significant at four months and gone by six months (Reinheimer et al. 2020)

How Often Should You Run Phishing Simulations?

Nov 3, 2026Zach EikenberryRead more

Comparison of Hook Security and Proofpoint security awareness training for MSPs and SMBs

Hook Security vs Proofpoint: An Honest Comparison for MSPs and SMBs (2026)

Nov 3, 2026Zach EikenberryRead more

How MSPs run phishing simulations across every client: no-blame rule in writing, safelisting, directory sync, one report button and a delivery check per tenant

How to Run Phishing Simulations for MSP Clients

Oct 30, 2026Zach EikenberryRead more

Comparison of Hook Security and CybSafe security awareness training for MSPs and SMBs

Hook Security vs CybSafe: An Honest Comparison for MSPs and SMBs (2026)

Oct 29, 2026Zach EikenberryRead more

Comparison of Hook Security and Hoxhunt security awareness training for MSPs and SMBs

Hook Security vs Hoxhunt: An Honest Comparison for MSPs and SMBs (2026)

Oct 28, 2026Zach EikenberryRead more

How to measure if security awareness training is working: a quarterly scorecard of reporting rate, time to first report, real phishing reported, clicks by difficulty and self-reported mistakes

How to Measure If Security Awareness Training Is Working

Oct 27, 2026Zach EikenberryRead more

Security awareness training employees don't hate, with a four-question demo test: would you watch it voluntarily, how long is the longest module, what happens after a click, does a report get a thank-you

Security Awareness Training That Employees Don't Hate

Oct 23, 2026Zach EikenberryRead more