Best MDR providers for dental practices compared (2026)
Six MDR options for a dental practice, compared on what each vendor publishes: HIPAA fit, identity coverage, price, term, seat minimum, who responds.
Read articleSecurity Awareness
Security awareness training providers for companies under 100 employees compared (2026)
Six awareness-training options under 100 seats, compared on what each publishes: simulation, managed or self-serve, reporting, price, term, seat minimum.
SMB
For a business under 100 employees, compare who runs the phishing programme, what records it produces and the full contract cost. A content library is useful only if someone assigns the work, follows up and keeps the evidence.
Ridge Plus costs $50 per person per month on an annual term, billed monthly, with no minimum. It adds staff training, email-security configuration and a secure browser to Ridge Core; business onboarding is separate. Obsidian Ridge's Ridge Core includes endpoint MDR and Microsoft 365 or Google Workspace ITDR at $25 per person per month, month-to-month with no minimum and business onboarding separate. Huntress's SOC monitors and acts 24/7; Obsidian Ridge provides CISSP-led follow-through within one business day, serving the Research Triangle and businesses across the United States. Obsidian Ridge's managed SAT is included in Plus and Reserve, not sold standalone. The table includes our offer, so it is not an independent ranking. Every outside vendor row was refreshed against its own public pages on October 2, 2026.
The comparison
| Provider | Phishing simulation included | Managed or self-serve | Reporting for insurance / compliance evidence | Pricing model | Contract term | Minimum seats | Sources |
|---|---|---|---|---|---|---|---|
| KnowBe4 | Yes, in both published SAT tiers | Platform administration by your team or separately engaged provider | Administrative activity records; ask for the completion/report sample your carrier needs | $2.40 SAT Foundation or $3.75 SAT Advanced per seat/month in the 25–50-user band | Listed rates assume a three-year term | Published band starts at 25–50; a smaller rate is not published | Pricing |
| Huntress Managed SAT | Yes | Managed learning and phishing simulations | Automated detailed reporting; carrier acceptance is not promised | $1.75 per learner per month at 100 learners; $2.08 per learner per month at 50 learners | 12 months standard | 50 per product direct/reseller; none required through an MSP | Pricing |
| Proofpoint ZenGuide | Yes | Platform plus separately scoped managed services through Premium Services | Reporting and programme measurement; obtain the report and service scope in the quote | Numeric price not published in cited sources | Not published | Not published | Service description, Premium Services |
| Phished | Yes | Automated programme; confirm service responsibilities | Training and simulation reporting; obtain a sample | Platform plans start at $175/month; no per-seat price published | Not published | Seat minimum not published | Pricing, vendor's price explanation |
| Hook Security | Yes | Managed programme with automated delivery | Client reporting and HIPAA training content | $2/user/month or $20/user/year; $999/year flat plan for fewer than 50 seats; no setup fee | Monthly and annual billing options published; confirm cancellation terms | General minimum not published; flat plan is under 50 seats | Pricing |
| Obsidian Ridge managed SAT | Yes | Programme administration and follow-up by Obsidian Ridge on Huntress | Training records; Sprint evidence pack is separately scoped | Included in Ridge Plus ($50/person/month) and Ridge Reserve ($70/person/month); not standalone | Annual, billed monthly | No minimum | SAT, pricing |
"Not published" means the cited page does not establish the fact. It does not mean the vendor has no condition. Ask for a quote at your actual headcount and keep its scope, term and renewal conditions alongside the table.
What changes the real bill?
The unit and the commitment matter as much as the rate. A platform starting price is not a per-user quote, and a rate at a stated volume is not automatically available below that volume. KnowBe4's cited price assumes three years; Hook presents monthly and annual billing options; Phished's public starting figure is a platform floor. Each row links the source for its own terms.
Huntress's direct and partner purchase routes differ. The row above reads the shared vendor facts so its rates, volumes, floor and term stay together. Through Obsidian Ridge, the approved offer has no minimum. Huntress pricing; Obsidian Ridge pricing.
Do not compare our bundled Plus fee with a training-only licence as though the services are identical. Plus also includes endpoint and identity monitoring, configured email protection and a secure browser. Business onboarding is separate: $500 for up to 25 machines, or $1,000 for 26 to 100.
Who will operate the programme?
Name the person who enrols new staff, schedules training, handles absences, reviews results and saves the reports. If that work stays with the business, include its time in the decision. If a provider performs it, put the deliverables and cadence in the proposal.
Managed delivery and automation are different. An automated campaign can keep running while an unresolved reporting or payment-approval problem remains. A useful review connects the results with work habits and makes someone responsible for the next action. Our managed SAT page explains the programme and managed ITDR covers account monitoring separately.
What training records help at renewal?
Keep the roster, assigned topics, assignment and completion dates, simulation results and follow-up actions. Match the period and population to the carrier's question. A planned course or purchased licence does not prove completion, and the carrier decides what evidence it accepts.
For business email compromise, train the actual workflow: changed bank details, payroll instructions and urgent requests apparently from a partner. Verify payment changes through a trusted callback route. Businesses serving Raleigh and the wider Research Triangle need that process just as businesses elsewhere do; location does not change the control.
When can a simpler programme fit?
A small firm can begin with documented instruction and its own reporting process if that meets its applicable requirements. First identify who owns the training, what topics and frequency are needed, and how completion will be recorded. Do not assume a manual session or a paid platform automatically satisfies a carrier, HIPAA or another obligation.
Use the free application-help service and questionnaire worksheet to start with the real requirement. The Readiness Sprint costs $1,500 to $3,500 once for a 7-business-day engagement. The deliverable is the same at each scope: a signed evidence pack and a record of controls and gaps. The Readiness Sprint is separate from the ongoing training programme. Talk with us about the roster and the evidence you need.
Sources
Fetched October 2, 2026.
- KnowBe4 pricing: tiers, rates, user band and three-year term.
- Huntress pricing: delivery, reporting, paired rates/volumes and purchase-route terms.
- Proofpoint service description and ZenGuide Premium Services: platform and managed-service scope.
- Phished pricing and its comparison's own price statement: platform starting price. Competitor claims on that comparison page are not used.
- Hook Security pricing: user and flat-plan pricing, reporting and delivery.
- Obsidian Ridge SAT, pricing and Readiness Sprint: approved bundle and evidence-work boundaries.
Last updated
October 2, 2026. We refresh this content as the threat landscape and tools evolve.
FAQ
Questions readers usually ask next
What phishing simulation tool is best for a small business?
Choose by who will run the programme, the reporting you need and the complete contract cost. KnowBe4 supplies a platform; Hook and Huntress describe managed programmes; Phished automates delivery.
Proofpoint offers both a platform and separately scoped managed services. Compare the actual proposal, not just the product label.
Does cyber insurance require security awareness training?
Read the carrier's actual form. Where it asks about training or phishing simulations, retain the completion dates, roster and results that support your answer. No report or vendor guarantees acceptance, coverage or a premium outcome.
How much does security awareness training cost per user?
The comparison separates per-user rates, volume bands and platform minimums.
KnowBe4's published 25–50-user rates assume a three-year term; Hook publishes monthly and annual options; Phished publishes a platform starting price rather than a per-seat rate.
Ridge Plus costs $50 per person per month on an annual term, billed monthly, with no minimum. It adds staff training, email-security configuration and a secure browser to Ridge Core; business onboarding is separate.
Managed vs self-run phishing simulations: which is better for a 20-person company?
Use a managed programme if nobody has time to own scheduling, enrolment, follow-up and reporting. Self-run can fit if a named administrator has that capacity. Automation reduces work but does not replace the business's responsibility for payment-verification procedures or reporting real incidents.
Which phishing-training providers support companies under 100 employees?
The table includes public small-team pricing or purchase routes where available. Check each seat minimum and contract. Obsidian Ridge has no minimum, while a vendor's direct terms may differ from those of its managed partners.
Can phishing training help a Raleigh business with business email compromise?
Training can teach staff to recognize requests to change payments or disclose credentials, and to verify them through a trusted channel. Pair it with configured email protection, MFA, account monitoring and a clear reporting route.
A training subscription alone does not prevent every fraudulent payment.
Related reading
Keep going
Cyber Insurance Questionnaire 2026: The 22 Controls Underwriters Are Asking About
The 22 controls cyber insurers verify in 2026: what each application question asks, why underwriters care, and the evidence behind a yes.
Read articleEmail security for small business: stopping BEC and phishing on a budget
A plain-English small-business email security guide focused on the cheap controls that cut business email compromise and phishing risk first.
Read article