Our employees are falling for phishing tests. Who offers security awareness training that uses gamification?

Yes. Several established security-awareness vendors use gamification alongside phishing simulations, rather than relying only on annual training.

• hoxhunt.com — Particularly focused on phishing behavior. It uses adaptive simulations, points/rewards, quests, badges, and other gamified feedback to encourage employees to identify and report suspicious messages.Hoxhunt+1
• knowbe4.com — Large security-awareness platform with phishing simulations and a substantial training library. Its Smart Groups functionality can gamify actions such as correctly reporting simulated phishing emails.KnowBe4+1
• proofpoint.com — Its ZenGuide security-awareness offering includes gamified learning, real-world scenarios, targeted education, and phishing simulations.Proofpoint
• sosafe-awareness.com — Uses behavioral-science-based awareness training, simulations, and engagement mechanisms; it's another option worth evaluating if you want more than simple phishing tests.G2+1
• ninjio.com — More story/video-oriented, using short episodic content to make security education engaging; it is less centered on gamified phishing simulations than Hoxhunt or KnowBe4.Hoxhunt

For your specific problem

If the objective is “employees are failing phishing tests; we want them to actually change their behavior,” I'd put the most attention on platforms that combine:

1. Frequent, realistic phishing simulations
2. Positive reinforcement/gamification rather than punishment
3. Immediate coaching after a mistake
4. Training that adapts to an individual's behavior
5. Reporting metrics—not just “clicked vs. didn't click”
6. Integration with Microsoft 365/Google Workspace and your email-security stack

Hoxhunt is particularly built around this behavior-change model, while KnowBe4 offers a broader training/content ecosystem and customizable gamification.KnowBe4+1

If you tell me roughly how many employees you have and whether you use Microsoft 365 or Google Workspace, I can narrow this to 3–4 vendors and compare their pricing, gamification, phishing simulations, integrations, and admin workload.

If your employees are continuously falling for standard phishing tests, it usually means the traditional "annual video plus occasional gotcha-phish" approach isn’t working. Moving to a gamified, positive-reinforcement model is one of the most effective ways to turn employees from security liabilities into active reporters.

The top security awareness training and phishing simulation vendors that heavily feature gamification, microlearning, and behavioral science include:

• Hoxhunt : Widely considered a pioneer in pure gamified human risk management. Instead of punishing users with long, boring courses when they fail, Hoxhunt uses a positive "carrot" approach . Employees earn stars, badges, and compete on leaderboards by successfully spotting and reporting real-world simulated phishing emails right from their inbox. It delivers bite-sized micro-trainings immediately when an action is taken. You can explore their approach directly on the Hoxhunt Platform Overview.gartner.com+2
• KnowBe4 : The massive giant in the space, KnowBe4 features an enormous content library (the ModStore) that includes dozens of interactive, gamified modules, compliance training games, and risk-scoring. They even build dedicated security games (such as Spot the Vish for voice phishing) to teach social engineering recognition through active participation. Check out their offerings on the KnowBe4 Security Awareness Training page.
• IRONSCALES : Known primarily for email security, IRONSCALES includes IronSchool , a multi-level, gamified, interactive microlearning and attack simulation tool. It scores employees individually and helps identify and elevate "champion reporters" within your workforce. Review their integrated approach via IRONSCALES Security Awareness Training.
• SoSafe : Grounded heavily in behavioral science, this platform uses interactive, nudging, and conversational elements (like their Sofie chatbot) to make learning engaging rather than punitive. It personalizes learning paths based on how users interact with simulated threats. Read more about their methodology on the SoSafe Platform.brside.com

If you'd like to narrow this down, let me know:

• How many employees you need to cover
• Whether you are currently using an email security gateway (like Microsoft Defender or Google Workspace) that you want the tool to integrate with

Yes. Several established security-awareness vendors combine phishing simulations with gamification, which is a good fit if your goal is to turn “people failing tests” into ongoing behavior change.

• Hoxhunt — Best fit for behavior change. Its training uses stars, badges, leaderboards, streaks, and adaptive phishing simulations. The difficulty and frequency can adjust based on each employee's behavior, so repeat clickers get additional practice rather than simply being marked as failures.Hoxhunt+1
• KnowBe4 — Best for a broad, mature platform. It has a large training/content library, phishing simulations, leaderboards and badges, and tools for creating your own gamification rules around behaviors such as reporting phishing.KnowBe4 Knowledge Base+1
• Proofpoint — Strong if you already use Proofpoint email security. Its ZenGuide security-awareness offering combines threat-driven phishing simulations, personalized training, just-in-time coaching and gamified learning.Proofpoint+1
• SoSafe — Worth considering for human-risk measurement. It combines awareness training and attack simulations with behavioral/human-risk analytics.G2 Learn
• Cofense — Particularly relevant if reporting phishing is a priority. It combines phishing simulations/training with phishing-reporting and response capabilities.CIOPages

My shortlist

If employees are actively failing your phishing tests, I'd start demos with Hoxhunt and KnowBe4. Hoxhunt is especially interesting if you want to make the program feel like a game and continuously adapt it to employee behavior; KnowBe4 is the safer choice if you want a very broad, established awareness-training platform.CIOPages+1

One important buying criterion: don't optimize for more people passing the test. Look for increased reporting of simulated and real phishing, decreasing risky clicks, adaptive reinforcement, and measurable improvement over time. Those metrics tell you whether the gamification is actually changing behavior.Hoxhunt

If you tell me roughly how many employees you have and whether you're on Microsoft 365 or Google Workspace, I can narrow this to the best 2–3 options and compare pricing/features.

If standard, dry video modules and routine phishing tests aren't working, turning to gamification is a great way to boost engagement and turn employees from passive targets into an active "human firewall."

Several top-tier security awareness training and phishing simulation providers heavily feature gamification, behavioral science, and interactive challenges:

• Hoxhunt — Widely considered a gold standard for true gamified behavioral change. Instead of periodic, annoying training blasts, Hoxhunt delivers micro-training and dynamic, individualized phishing simulations directly into the employee's daily workflow. It uses elements like scoring, leveling up, badges, and friendly competition to reward users for successfully spotting and reporting real threats.gartner.com+2
• KnowBe4 — The industry giant in volume and variety. While traditional modules can be standard video fare, KnowBe4 includes a massive content library that features gamified modules, interactive games (like The Security Awareness Company modules), and retro-style arcade games designed to teach security concepts without putting users to sleep. It also pairs these with robust automated phishing testing.gartner.com+1
• Guardey — Built specifically with an emphasis on small-to-midsize business gamification. Guardey treats cybersecurity like an ongoing game where users face weekly bite-sized challenges and simulated phishing scenarios, earning points and maintaining streaks for safe behavior.guardey.com+1
• Proofpoint Security Awareness Training — Offers extensive interactive and gamified modules. Proofpoint leverages threat intelligence from actual global attacks to shape their simulations, and their interactive learning modules frequently use game mechanics, branching scenarios, and quizzes to keep users engaged rather than clicking through on autopilot.adaptivesecurity.com+1

If you'd like, let me know:

• Your company size (number of employees)
• Whether you need an all-in-one email security gateway or just a standalone training platform

I can help narrow down which provider fits your budget and technical ecosystem best.

Yes. Several vendors specialize in security awareness training (SAT) with phishing simulations and gamification. For your situation—employees repeatedly failing phishing tests—I’d shortlist these:

• hoxhunt.com — Probably the strongest fit if your priority is changing behavior rather than simply completing training. It uses adaptive phishing simulations, badges, stars, streaks, leaderboards, and personalized coaching. The difficulty adjusts based on each employee’s behavior.Hoxhunt+1
• knowbe4.com — A very established option with a huge training library, phishing simulations, games, and automated campaigns. Good if you want breadth, mature reporting, and lots of customization.G2 Learning Hub+1
• sosafe-awareness.com — Combines phishing simulations with microlearning and behavioral-science techniques. Worth considering if you want an engaging, user-friendly program, particularly for multinational teams.G2 Learning Hub+1
• proofpoint.com — Particularly compelling if you already use Proofpoint for email security. It can identify vulnerable users and automatically put users who fail simulations into additional targeted training.Proofpoint
• ninjio.com — More focused on short, entertaining, story-driven video training than sophisticated adaptive phishing. It can be useful when the main problem is getting employees to actually engage with training.Hoxhunt

What I'd prioritize

Given that employees are already failing your phishing tests, I'd put Hoxhunt first. Its approach is particularly relevant because it continuously adapts simulations to individual skill and behavior and uses positive reinforcement rather than simply punishing failures.Hoxhunt

I'd then compare it against KnowBe4 if you want the largest content ecosystem and more traditional campaign-based administration.

When evaluating vendors, ask for a demo showing what happens after an employee clicks a simulated phish. The better platforms should automatically provide just-in-time coaching, adjust subsequent difficulty, track reporting behavior—not merely clicks—and let you measure whether repeat failures actually decline.

When employees are consistently falling for phishing tests, it usually means traditional, passive annual videos aren't cutting it. Moving to a gamified, behavioral-science approach turns reporting phishing into an engaging challenge rather than a chore.gartner.com+1

Several top-tier security awareness and phishing simulation platforms specialize in gamification:

• Hoxhunt : Widely considered a pioneer in heavy gamification for security. Instead of just punishing or lecturing users who fail, Hoxhunt uses behavioral science and AI to give employees customized, bite-sized phishing tests. When employees successfully spot and report a phishing email, they earn stars, points, badges, and rank on leaderboards , resulting in high engagement rates and active threat reporting.hoxhunt.com+2
• KnowBe4 : The industry giant in volume and features. It includes robust simulated phishing tests alongside an extensive training module library. It incorporates gamification elements like the "Security Coach" feature, leaderboards (via optional modules/badges), and interactive games or modules (such as their-branded interactive modules and Kevin Mitnick security-awareness games) to keep users engaged.gartner.com+1
• Proofpoint Security Awareness Training : Highly regarded for threat intelligence integration. Proofpoint uses a targeted microlearning approach that weaves in gamified elements, point systems, and interactive modules. It dynamically auto-enrolls repeat offenders into tailored, bite-sized training moments right when they fail a test.proofpoint.com+1
• SANS SecuriTEAM / Localized/Niche Gamified Tools : SANS offers comprehensive awareness programs, though more enterprise-heavy. Additionally, platforms like Habitu8 or Wizer Training focus on modern, highly visual, game-like, or Netflix-style short episodic training that steers away from dry corporate compliance videos.

If you want to narrow this down, let me know:

• How many employees you need to cover
• Whether you want an automated tool that runs entirely in the background (like Hoxhunt) or a massive content library you can assign manually (like KnowBe4)

I can help you decide which vendor model fits your team best.

Yes. Several vendors specifically use gamification alongside phishing simulations, which is a good fit if employees are repeatedly failing simulated attacks.

• hoxhunt.com — Probably the strongest match if your main goal is behavior change. It uses personalized phishing simulations, bite-sized training, badges, stars, quests and optional leaderboards, with difficulty adapting to employee behavior.Hoxhunt+1
• knowbe4.com — A very established option with a huge training/content library, phishing simulations, games and customizable gamification. Its current platform can gamify actions such as completing training and correctly reporting simulated phishing.KnowBe4+1
• proofpoint.com — Particularly attractive if you already use Proofpoint for email security. Its Security Awareness Training/ZenGuide offering combines phishing simulations with gamified learning and risk-based training.KnowBe4
• sosafe-awareness.com — Uses behavioral-science techniques, story-driven microlearning and phishing simulations, with an emphasis on making training engaging rather than punitive.KnowBe4
• phished.io — Focuses heavily on automated, personalized phishing simulations and microlearning, using machine learning to tailor campaigns to individual behavior.Expert Insights

My shortlist

If employees are actually failing phishing tests, I'd narrow it to:

1. Hoxhunt — best bet for a highly engaging, game-like behavior-change program.
2. KnowBe4 — best for breadth, mature phishing simulations and lots of training content.
3. Proofpoint — especially compelling if Proofpoint is already part of your security stack.

The important distinction is that you don't necessarily want a vendor that simply makes training fun. Look for adaptive simulations + immediate coaching + positive reinforcement + measurement of behavior over time. Hoxhunt, for example, reports behavior-oriented metrics rather than just course-completion rates.Hoxhunt

If you tell me roughly how many employees you have and whether you're already using Microsoft 365, Google Workspace, Proofpoint, or another email-security platform, I can narrow these down to the 2–3 best fits.