Phin Security
Delaware-registered security awareness training and phishing simulation platform built specifically for managed service providers.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Phin Security, founded in 2019 by CEO Connor Swalm and CTO/co-founder Joshua Simmons, provides automated security awareness training and phishing simulation software built specifically for managed service providers (MSPs) running Microsoft 365 environments for many small-business clients at once. Rather than a general enterprise awareness-training tool, the platform is designed around MSP workflows: Phin’s own materials claim it cuts the time MSPs spend setting up and managing training per client from several hours to about 20 minutes, through automation and templated campaigns across many clients simultaneously.
The company has raised a total of roughly $5.7 million in disclosed funding and has a real, if small, base of public reviews: its G2 listing shows a 4.8-out-of-5 rating with reviewers specifically praising support responsiveness and reporting quality compared to other awareness-training tools they’d used. An independent third-party review notes that criticism tends to focus on reporting polish, integration breadth and the size of its training content library — reasonable limitations for a 21-50 person company competing against much larger, better-resourced players like KnowBe4 and Proofpoint in a mature category.
Innovation Matrix Assessment
Has iterated steadily on MSP-specific automation features since 2019, reflected in ongoing G2 reviews, but without evidence of rapid category expansion.
Automating per-client training setup for MSPs directly reduces the operational overhead that otherwise makes awareness training a neglected task for overstretched MSP teams.
Roughly $5.7M in total disclosed funding and an active, if modest, base of paying customers reflected in real G2 reviews is credible but unspectacular momentum.
Security awareness training and phishing simulation is a long-established, mature category; Phin's innovation is workflow automation for the MSP channel rather than a new detection or training method.
Has genuine, independently-visible G2 reviews (4.8/5) from real users, though the sample is thin and the vendor's specific '41% reduction in phishing clicks' claim is unverified by any named methodology.
Human-targeted phishing remains a leading breach vector, keeping awareness training relevant, though the category is mature and consolidating around larger incumbents.
Why CISOs Should Care
Lets resource-constrained MSPs run consistent phishing simulation and training across many client environments without a dedicated security-awareness staff member.
What Makes It Different
Purpose-built automation for the one-to-many MSP delivery model, rather than a single-tenant enterprise awareness-training product adapted after the fact.
The Matrix Verdict
50/100 — INCREMENTAL INNOVATOR
An Incremental Innovator: a real, independently-reviewed product with genuine (if modest) customer satisfaction evidence, operating in a mature category without a strong technical differentiator.
Editorial Note: Claims vs. Verified Findings
G2 ratings and review content are independently verifiable on G2's platform. The vendor's specific phishing-click-reduction percentage and setup-time-savings figures are company-stated without published methodology.
Sources
Alternatives to Phin Security
Chainalysis
The dominant, decade-plus incumbent in blockchain analytics, tracing illicit crypto flows and screening sanctions/AML risk for exchanges, banks,…
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Drata
Continuous compliance automation platform, Vanta's closest direct competitor, covering SOC 2, ISO 27001/42001, HIPAA, PCI DSS, DORA, and…