Seat Count
Per-user pricing usually drops as volume increases, especially at district-wide scale.
Pricing guide
Security awareness training costs a median of $24.48 per user per year, or about $2 per user per month. That covers the 36 vendors in Tartan App's dataset that publish a US-dollar price per user. The middle half of them charge between $18.00 and $48.41. Some vendors price per school instead, so the cost doesn't rise with staff count.
Price ranges
Prices vary a lot. Only 2 vendors charge under $10 per user a year, and 8 charge $50 or more. The 22 vendors that quote on request aren't in these figures.
36 vendors by price per user per year (USD)
For schools
Per-user pricing counts every person you train. In a school, that's all of your staff, and it can include your students.
Take a school with 60 staff. At the median per-user price, staff training costs about $1,469 a year. With per-school pricing, your staff count doesn't change the price. SecureSchools lists its paid plans at $1,999 to $3,999 a year per school, depending on school type and plan. Tartan charges $146 a year for one public school in a district or school board, with unlimited staff. It splits into $116 for employee phishing simulations and $30 for employee video training.
SecureSchools lists annual district pricing from $1.70 per student. For 600 students, that starts at $1,020 a year. Tartan's Student Phishing & Video Training costs $270 a year for one public school. Package features and coverage differ. See Tartan pricing for 1 to 10 schools.
Free options exist for K-12 too. Fortinet offers its Security Awareness and Training Service: Education Edition at no cost to US K-12 school districts. It includes staff training modules, quizzes, an admin interface, and classroom lesson plans. Phishing simulations aren't part of the free edition; Fortinet offers them in its paid version.
If you're in Texas, state law requires each school district's cybersecurity coordinator to complete a state-certified training program every year. Tartan's training program is certified by the Texas Cyber Command for 2026–2027.
Method
To compare vendors fairly, we use each vendor's lowest published tier and lowest available volume. If monthly pricing is listed, it is annualized for side-by-side review.
Source mix in this dataset: 27 vendor-hosted sources and 21 third-party sources. Each row in the table shows the date its price was checked.
Price drivers
Security awareness pricing is rarely based on one variable. Most contracts combine licensing, implementation, and service requirements, so two schools with the same seat count can still receive different quotes.
Per-user pricing usually drops as volume increases, especially at district-wide scale.
Larger or specialized libraries often increase cost, particularly when student content is included.
White-glove onboarding, implementation help, and managed services can add cost.
Reporting integrations, phishing report buttons, and threat workflows are frequently priced separately.
Multi-year agreements can reduce annual price, while short-term contracts tend to be higher.
Staff-only programs are often cheaper than staff + student programs.
Advanced export, audit, and executive reporting requirements can move buyers into higher tiers.
Buying direct vs. reseller or consortium contracts can change final pricing.
What's included
Types
Built for schools and districts with separate staff and student workflows, school-friendly content, and practical implementation support.
Designed for lean teams that want quick deployment, low administrative overhead, and predictable month-to-month pricing.
Focused on advanced controls, broad integrations, and larger bundles that often include negotiated contracts and additional modules.
Tartan App pricing
Tartan is priced per school rather than per user, however for an average school district, annual pricing at the lowest volume would typically work out to approximately $3.20 per user per year and gets as low as $1.62 per user per year.
FAQs
KnowBe4 lists its Security Awareness Training Foundation plan at $2.40 per seat per month for 25 to 50 seats. The price falls to $1.63 per seat per month at 501 to 1,000 seats. These are list prices for a 3-year term, as of May 2026. Above 1,000 seats, KnowBe4 quotes on request.
Amazon offers a free Cybersecurity Awareness course that takes about 15 minutes. Gophish is a free, open-source phishing framework. Wizer has a free plan with basic training.
Most vendors charge per user, and list the price per month or per year. Some set a minimum seat count and lower the price for more seats or longer terms. Wizer, for example, lists $25 per user per year from 25 users on a 3-year term, and $8 at 3,001 users or more. Some vendors built for schools price per school or per student instead.
Where possible, prices were normalized using the lowest available tier and lowest stated volume so vendors can be compared on a consistent baseline. Some vendors only publish partial pricing, so those entries are labeled accordingly and should be validated directly.
Not always. Some vendors primarily sell through MSP channels, so the public price may reflect MSP packaging or reseller terms rather than a direct customer contract price.
Many security awareness training solutions hide pricing to initiate direct sales conversations, manage complex, customized enterprise deals, and prevent competitors from learning their pricing strategies. This allows companies to customize pricing to their client's budgets and requirements, avoid losing leads due to high sticker prices, and handle variable, modular, or, in some cases, unstable, pricing models. Some also package pricing through partners or bundles, which means a single public list price does not exist.
Use an annualized per-user view to compare vendors fairly. That prevents lower monthly headline prices from hiding higher total yearly cost.
Base plans often include phishing simulations, awareness content, and reporting. Integrations, premium libraries, and advanced workflows are often extra.
Start with your seat count, required features, and implementation timeline. Then compare annualized cost per user plus any setup or support requirements.
Use the downloadable CSV and source links in the table for citation and review.
For all prices, we attempted to use the lowest-tier plan and lowest volume to normalize across vendors. Use search and sortable columns to compare options.
| Source Type | Source | ||||||
|---|---|---|---|---|---|---|---|
Tartan App | $3.20 | Per user per year | $3.20 | - | MSRP | Vendor | Source |
Arctic Wolf Managed Security Awareness | $16 | Per user per year | $15.75 | 5x higher | Only Available Public Price | Marketplace | Source |
AttackSimulator | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Aujas | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
AwareGO Online Security Awareness Training | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
BaitAndPhish | $15 | Per user per year | $15.00 | 5x higher | MSRP | Vendor | Source |
Barracuda Phishline | $14.14 | Per user per year | $14.14 | 4x higher | Only Available Public Price | Not Available | Source |
Beauceron Security | $23.99 | Per user per year | $23.99 | 7x higher | Only Available Public Price | Reseller | Source |
BoxPhish | £4.14 | Per user per year | £4.14 | 1.3x higher | Only Available Public Price | Archive | Source |
Breach Secure Now (BSN) | $3 | Per user per month | $36.00 | 11x higher | Only Available Public Price | Community | Source |
BullPhish ID | $3.99 | Per user per month | $47.88 | 15x higher | Only Available Public Price | Reseller | Source |
CanIPhish | $1.80 | Per user per month | $21.60 | 7x higher | MSRP | Vendor | Source |
Carbide Secure | $7,500 | Per year | - | - | MSRP | Vendor | Source |
CIRA | $50 | Per user per year | $50.00 | 16x higher | MSRP | Vendor | Source |
Cisco Secure Awareness Training | $63.21 | Per user per year | $63.21 | 20x higher | Only Available Public Price | Archive | Source |
Cofense | $10 | Per user per month | $120 | 38x higher | Only Available Public Price | Not Available | Source |
Cyber Guru | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Cyber Risk Aware | $7.80 | Per user per month | $93.60 | 29x higher | Only Available Public Price | Reseller | Source |
CyberAware | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Cybeready | £4.40 | Per user per month | £52.80 | 17x higher | Only Available Public Price | Archive | Source |
CyberHoot | $2.50 | Per user per month | $30.00 | 9x higher | MSRP | Vendor | Source |
CyberNut | $9.50 | Per user per year | $9.50 | 3x higher | Only Available Public Price | Marketplace | Source |
CyberProtex Security Awareness Training | $49.99 | Per user per year | $49.99 | 16x higher | Only Available Public Price | Marketplace | Source |
Cybsafe | £1.75 | Per user per month | £21.00 | 7x higher | Only Available Public Price | Reseller | Source |
Defendify | $150 | Per month | - | - | MSRP | Vendor | Source |
Fortinet Security Awareness Training | $20.99 | Per user per year | $20.99 | 7x higher | MSRP | Reseller | Source |
GoldPhish | $12.00 | Per user per year | $12.00 | 4x higher | MSRP | Vendor | Source |
GoPhish | $0 | Open source | $0 | Free | MSRP | Vendor | Source |
Guardey | $3.33 | Per user per month | $39.96 | 12x higher | MSRP | Vendor | Source |
HackRangers | $1.72 | Per user per month | $20.64 | 6x higher | MSRP | Marketplace | Source |
HookSecurity | $1.50 | Per user per month | $18.00 | 6x higher | MSRP | Marketplace | Source |
Hoxhunt | €4.85 | Per user per month | €58.20 | 18x higher | Only Available Public Price | Not Available | Source |
Huntress | $2.08 | Per user per month | $24.96 | 8x higher | MSRP | Vendor | Source |
Hut Six Security by Hut Six | £6.00 | Per user per year | £6.00 | 2x higher | MSRP | Vendor | Source |
Infosec IQ | $18.00 | Per user per year | $18.00 | 6x higher | MSRP | Vendor | Source |
Inspired eLearning | $1.84 | Per user per month | $22.08 | 7x higher | MSRP | Vendor | Source |
Inxtinct Cyber Awareness | $2.49 | Per user per month | $29.88 | 9x higher | MSRP | Vendor | Source |
IronScales | £42 | Per user per year | £42.00 | 13x higher | Only Available Public Price | Archive | Source |
Junglemap | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
KeepNet Labs | $1.80 | Per user per month | $21.60 | 7x higher | MSRP | Vendor | Source |
KnowBe4 | $2.40 | Per user per month | $28.80 | 9x higher | MSRP | Vendor | Source |
Living Security | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
MetaCompliance | £22.49 | Per user per year | £22.49 | 7x higher | Only Available Public Price | Archive | Source |
Mimecast Security Awareness Training | $15.49 | Per user per year | $15.49 | 5x higher | Only Available Public Price | Reseller | Source |
Ninjio | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Optiv Cybersecurity Education | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
OutThink | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Phin Security | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
PhishEd | $175 | Per month | - | - | MSRP | Vendor | Source |
PhishFirewall | $1.60 | Per user per month | $19.20 | 6x higher | MSRP | Vendor | Source |
Phishing Tackle | £3.00 | Per user per year | £3.00 | 0.94x lower | MSRP | Vendor | Source |
PhishingBox | $1.65 | Per user per month | $19.80 | 6x higher | MSRP | Vendor | Source |
PhishRod | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Phriendly Phishing | $80 | Per user per year | $80.00 | 25x higher | Only Available Public Price | Archive | Source |
Pistachio | $7 | Per user per month | $84.00 | 26x higher | MSRP | Vendor | Source |
Proofpoint Security Awareness Training | $1 | Per user per month | $12.00 | 4x higher | MSRP | Vendor | Source |
ProPhish by ProgIST Solutions | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
RightHand | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Riot | $6.89 | Per user per month | $82.68 | 26x higher | MSRP | Vendor | Source |
SANS Security Awareness | $5.55 | Per user per year | $5.55 | 2x higher | Only Available Public Price | Reseller | Source |
SecurED by Digital Defense | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
SecureSchools | $2,999 | Per year | $8.30 | 3x higher | MSRP | Vendor | Source |
Security Mentor Security Awareness | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Sophos Phish Threat | $38 | Per user per year | $38 | 12x higher | Only Available Public Price | Reseller | Source |
SoSafe | £21.79 | Per user per year | £21.79 | 7x higher | Only Available Public Price | Archive | Source |
Terranova Security | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
ThreatCop | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
ThreatReady | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
TitanHQ | $7.80 | Per user per mont | $93.60 | 29x higher | MSRP | Vendor | Source |
Traliant | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
uSecure | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Webroot | Not publicly listed | Not publicly listed | - | - | Not available | Not Available | - |
Wizer | $25 | Per user per year | $25.00 | 8x higher | MSRP | Vendor | Source |
Source legend
Vendor means the source is on a vendor-owned domain.|Reseller/Marketplace means pricing was referenced from a partner or procurement listing.|Community/Archive means historical or forum evidence.