Hook Security

Hook Security runs managed phishing simulation and security awareness training as a done-for-you service: instead of selling a self-serve platform that an internal security team has to configure and run, Hook Security’s staff design and operate the phishing campaigns, assign remediation training when someone clicks, and generate the click-rate and risk-trend reporting that goes to leadership. That managed-service model is the company’s core differentiation from larger, self-serve competitors like KnowBe4 and Proofpoint’s security awareness products, aimed at mid-market organizations that don’t have a dedicated person to run an awareness program.

Founded in 2018 by Adam Anderson, Brad Powell, and Zachary Eikenberry and headquartered in Greenville, South Carolina, Hook Security has grown to roughly $3.2 million in estimated annual revenue with a lean team of around 26 employees, according to third-party revenue-tracking estimates. The company frames its approach as addressing “psychological security” — training people at the point of a realistic, ongoing simulated attack rather than through a once-a-year compliance training video — and reports an average 73% reduction in phishing risk among its customers, though that figure comes from the company’s own reporting rather than an independent study.

Security awareness training and phishing simulation is a mature category with well-established, larger incumbents, and Hook Security’s efficacy claims and revenue figures are not independently audited. Its realistic differentiation is the managed-service delivery model rather than a novel detection or training technology, which is a legitimate value proposition for resource-constrained buyers but not a technical disruption to the category.