Award-Winning Security Awareness Training Library

Every course is listed above — this page is the full library, not a sample.

Counted as modules, the unit most vendors quote, it runs past 300: PsySec Essentials alone is 14, and Tech Stack Tips covers 26 sessions. Hook Security counts courses here because a course is what you assign to a person.

Monthly. Courses are produced in-house by Hook Security’s own studio rather than licensed in, which is why the cadence is steady and the tone is consistent across series.

The #Trending Attacks series exists for exactly this — short courses on what people are falling for right now: AI-generated voices, QR code traps, MFA approval tricks. Not examples from three years ago.

Yes. Tick “Has a preview” in the filters above and press play on any card — the preview opens right here, no form and no booking.

Full episodes are also free on Hook Studios and YouTube.

Yes — the Hook+ Course Catalog (Spring 2026) is 43 pages covering every series, module counts, and the compliance and language detail. No email required; the link is at the top of this page.

Six industries have their own course: healthcare, financial institutions, law firms, real estate, higher education and small businesses. Each is 5–6 minutes on the threats that industry actually meets — wire fraud in real estate and law, student data in higher ed, payment data in finance.

If yours is not one of the six, the general library still covers you. The industry course is an addition, not a replacement.

Yes, most developed on the HIPAA track, where the same regulation lands differently by job: clinical care providers, administrative staff, and IT and leadership each get their own 16-minute course. Remote workers get Working Remotely and Cybersecurity at Home.

Welcome to Hook Security introduces new starters to what security training is and why phishing matters. Security Awareness Training Express is 15 minutes of the greatest hits, for people who joined mid-cycle and missed the annual course.

Subtitles ship with the multilingual courses listed under Languages above. For the rest of the library and for accessibility conformance, ask in the demo — we would rather give you the precise answer for your requirement than a general claim.

Worth saying plainly. Hook Security is built for SMBs and the channel — MSPs, MSSPs, VARs and agents. It is a poor fit if you need deep SIEM or SOC-tooling integration inside the training platform, if you only want a compliance checkbox and genuinely do not care whether anyone watches, or if you want a library you can rewrite yourself. The content is produced in-house and delivered as-is; that consistency is the point, but it is not flexibility.

Completion reporting per person and per group — who was assigned what, who finished, and when. That record is the practical difference between having a training programme and being able to prove you have one.

Usually. Most carriers ask for documented annual security awareness training plus phishing simulation, and Hook Security produces exactly that evidence. Bring your carrier’s wording to the demo and we will match it line by line.

Enough for compliance. Not enough for behaviour.

An annual course is a single exposure, and people forget most of a one-off session within weeks. That is why the library is built around 2–10 minute monthly courses: reinforcement, not duration, is what moves the needle.

Through Hook Security’s own LMS. People are enrolled, get an email with their assignment, and work through the course in the browser. Nothing to install, no portal to remember.

Yes — the courses are SCORM compatible, so you can run them inside an LMS you already have and keep training in one place.

Yes. Every Deep Dive, Mike Fry, Quick Hit and industry course ends with a quiz, and annual courses carry questions through their modules — not to catch anyone out, but because being asked is what makes a lesson stick. Pass thresholds and retakes are configurable.

Yes — that is the normal way to run it. Clinical staff get the HIPAA clinical course, admins get the admin one, finance gets the financial institutions course, everyone gets the annual. Groups are how assignment works, not an add-on.

No. Autopilot is Hook Security running the whole thing — scheduling, enrolments, reminders, phishing simulations and reporting — so the programme happens whether or not anyone on your side has time that month.

They land on a page that tells them what just happened and plays a short Click Report video breaking down the red flag they missed. Premium versions walk through the entire email — spoofed brand, sender address, urgent language, suspicious links.

It is immediate, specific, and not punitive. A click is a learning moment, and training that arrives four seconds after the mistake is worth more than training scheduled for March.

Yes — the channel is how most of this library reaches end users. Hook Security works with hundreds of MSP partners and supports multi-tenant management, so one console covers every client. See Hook Security for MSPs.

That is the whole product. Hook Security’s courses are written and filmed in-house as comedy — recurring characters, story arcs, real actors — because people finish what they enjoy and abandon what they do not. No stock animation, no AI narration, no anime avatar explaining ransomware.

For completion numbers against your industry and company size, ask in the demo. We will show you the real reporting rather than a statistic on a web page.

Completion and engagement per person and per group, phishing simulation results including click and report rates, and change over time. Report rate matters more than click rate — a workforce that reports quickly contains an incident; a workforce that never clicks in a simulation may simply have stopped reading email.

$2 per seat per month, $20 per seat per year billed annually, or a flat $999 per year under 50 seats. Those are MSRP.

Buying through an MSP or reseller? They set their own pricing for their clients, so the number your provider quotes is theirs, not this one. Full pricing detail.

Yes, as a bespoke arrangement — terms depend on volume, territory and whether you are re-hosting or embedding. Worth a conversation rather than a price list.