Full Report
With 2024 ending, let’s look back at everything new from Huntress Managed SAT this past year.
Analysis Summary
# Industry News: Huntress Reports 9x Growth in Managed SAT, Validating "Managed" Approach to Security Culture
## Summary
Huntress has released its 2024 retrospective for its Managed Security Awareness Training (SAT) platform, highlighting a massive 900% increase in learner enrollment over the past eleven months. The year was defined by a shift toward "managed" delivery models, personalized coaching for compromised users, and the expansion of story-based content to address emerging threats like AI and Adversary-in-the-Middle (AiTM) attacks.
## Key Details
- **Date:** December 8, 2024
- **Companies Involved:** Huntress
- **Category:** Product Updates / Market Analysis
## The Story
In 2024, Huntress aggressively scaled the Managed SAT platform it acquired (formerly Curricula). The company reported that learners spent over 72 million minutes engaging with their story-based training content. A central pillar of their 2024 strategy was the launch of **Phishing Defense Coaching** in June. This feature moves away from generic "re-education" by providing immediate, context-aware feedback from virtual "Huntress Threat Researchers" to users who fail phishing simulations.
Throughout the year, Huntress added six major training episodes and 20 new phishing simulations tailored to specific global geographies. The content focused on the current threat landscape, including the risks of generative AI (personified through the "GabBot" storyline) and sophisticated Business Email Compromise (BEC) tactics.
## Business Impact
### For the Companies Involved
- **Huntress:** The 9x growth in enrollment validates Huntress’ move into the human risk management space. By integrating SAT into their broader managed security platform, they have successfully increased their "stickiness" within the MSP (Managed Service Provider) channel.
### For Competitors
- **Competitive Landscape:** Huntress is directly challenging legacy SAT providers (like KnowBe4) by emphasizing a "managed" service rather than just a software tool. Their 2% compromise rate—significantly lower than the 5% industry benchmark—provides a powerful marketing metric against competitors.
### For Customers
- **MSPs and SMBs:** The "Managed" aspect reduces the administrative burden on small IT teams who no longer have to design monthly curricula or phishing campaigns manually.
- **End Users:** Learners experience less "training fatigue" due to the story-driven, animated format compared to traditional corporate compliance slide decks.
### For the Market
- **Trend Toward Managed Services:** The success of this platform signals a broader market shift where SMBs prefer security outcomes (managed culture) over security tools (SAT software).
## Technical Implications
- **AiTM and AI Focus:** The inclusion of Adversary-in-the-Middle (AiTM) training reflects a technical shift in the threat landscape where MFA-bypass is becoming a standard attacker capability.
- **Data-Driven Coaching:** The platform now uses behavioral triggers to deliver specific technical pointers at the "point of failure," bridgeing the gap between a simulation and real-world application.
## Strategic Analysis
- **Market Positioning:** Huntress is positioning SAT as a core component of defensive tradecraft rather than just a compliance checkbox.
- **Competitive Advantage:** Their use of "Phishing Defense Coaching" creates a feedback loop that transforms a negative user experience (being tricked) into a positive learning moment, which is a key differentiator in building "security culture."
- **Challenges:** Maintaining the quality of high-production animated content while keeping pace with the rapid evolution of AI-driven threats will be a resource-intensive challenge.
## Industry Reactions
- **Analyst Perspective:** The 9x growth suggests that the MSP market was underserved by complex, high-maintenance SAT platforms.
- **Market Response:** The 2% Phish-prone Percentage (PPP) achieved by Huntress users suggests that the story-based, managed approach is effectively driving behavioral change more rapidly than traditional methods.
## Future Outlook
- **Predictive Training:** Expect Huntress to lean further into AI-driven personalization, perhaps using their MDR (Managed Detection and Response) data to trigger specific SAT modules based on real threats seen on a customer's network.
- **Expansion:** Watch for further geographic localization as Huntress continues to expand its footprint in Australia, Canada, and the UK.
## For Security Professionals
Practitioners should note the effectiveness of "just-in-time" training. The data suggests that personalized coaching immediately following a simulation click is more effective at reducing risk than annual or quarterly generic training sessions. For those managing diverse workforces, the transition to geographic-specific phishing simulations is now a baseline requirement for a mature program.