An MSP can sell security awareness training as a one-off course, or it can make human risk a recurring part of every managed-service relationship. The difference is usually the platform experience: can the MSP present training, phishing simulations, reports and certificates under its own brand, manage many clients without duplicate administration, and prove the work at a quarterly business review?
This guide compares security awareness platforms with custom branding for MSPs in 2026. It focuses on the details that change delivery and margin: white-label depth, multi-tenant management, phishing automation, reporting, pricing visibility, integrations and Australian framework evidence.
TL;DR
- Best for full white-label delivery: Cyber Aware, with branded portals, notifications, simulations, reports and certificates described on its public comparison page.
- Best for no-minimum per-seat billing: Cyber Aware or uSecure, subject to each vendor’s current commercial terms.
- Best for a broad enterprise content library: KnowBe4, but its public branding materials describe console, template and certificate branding rather than a fully MSP-branded client portal.
- Best for fully managed monthly delivery: Huntress SAT, where Huntress runs the campaign calendar, but it is co-branded rather than fully white-label.
- Best for quick channel onboarding: CyberHoot, which describes multi-tenancy, brandable communications and fast client setup.
- Best for Australian framework evidence: Cyber Aware, because its published comparison page maps Essential 8 and SMB1001; confirm the current scope before selling an assurance claim.
What custom branding should mean
“White label” is not a single feature. An MSP should check each client-facing touchpoint:
- Portal and login: does the client see the MSP’s name, logo, colours and domain?
- Training experience: do modules, learner pages and completion screens carry the MSP identity?
- Phishing emails and landing pages: can the MSP choose the sender identity, branding and reply or report route?
- Reports and certificates: can the MSP export a client-ready report without removing the vendor’s identity by hand?
- Administrator console: can the MSP switch between clients, apply templates and delegate access without signing into separate accounts?
- Commercial experience: can the MSP price the service, see active seats and manage renewals without exposing wholesale terms?
A platform can brand a dashboard while leaving phishing emails and certificates untouched. That may be co-branding, not white-label delivery. The distinction matters because those emails and certificates are the parts a client opens and shares.
Cyber Aware’s MSP comparison guide publishes a matrix across white-label depth, seat minimums, multi-tenancy, phishing automation, gap assessments, Australian frameworks and integrations. Cyber Aware is also a competitor in that page, so its own claims should be checked against the product demonstration and contract.
How to evaluate the shortlist
1. White-label depth
Ask the vendor to demonstrate the complete journey as a client user. Enrol a test account, receive an assignment, complete a lesson, receive a phishing simulation, report a simulated message and download a certificate. Look for vendor logos, sender addresses, portal domains, support links and footer text.
A logo upload alone is not a white-label programme. The practical test is whether a client can complete the entire journey while seeing the MSP as the service provider.
2. Multi-tenant workflow
A working multi-tenant console should make it easy to create a new client from a template, assign a client admin, set a different training calendar, view results by client and export one client’s report without mixing it with another’s data.
Ask how the platform handles a small client with 12 users, a 200-user client with several departments and a client that leaves the MSP. Confirm whether one client can see another client’s users, campaigns, scores or invoices.
3. Phishing automation
The first campaign is rarely the problem. The work appears in month two, when an MSP has 30 clients and each needs a different audience, scenario and follow-up. Look for recurring schedules, varied templates, adaptive difficulty, safe landing pages, report-button support and automatic remediation after a click.
Ask who owns the calendar. Cyber Aware describes Auto Phish as generating a full year of varied campaigns from one setup conversation. uSecure describes automated schedules and adaptive campaigns. Huntress describes a fully managed service in which its researchers design and run campaigns end to end. Those are different operating models: self-serve automation, platform automation and vendor-managed delivery.
4. Reporting and QBR evidence
A client report should answer four questions: who completed training, who is overdue, how did people respond to simulations, and what action follows? It should show trends without shaming individuals or exposing one client’s data to another.
Look for exports, filters, role or department views, completion evidence, phishing reports and a way to record follow-up. Cyber Aware’s Human Risk Score reporting describes a monthly learner score built from overdue courses, failed quizzes, completion behaviour and phishing results, with administrator views for filtering and branded PDF exports.
5. Framework and market fit
Australian MSPs may need to support clients asking about Essential 8 or SMB1001. Do not assume a vendor’s general “compliance” label means its training and gap assessment are mapped to those frameworks. Ask to see the control mapping, evidence fields and export.
Cyber Aware’s public comparison page states that it maps Essential 8 and SMB1001. Its competitors’ public materials vary: some cite other frameworks, some describe generic risk scores, and some do not publish a mapping. Treat an absent public claim as “not confirmed”, not as proof that the vendor cannot provide it.
6. Pricing and minimums
Model three clients before choosing a contract: a 15-seat client, a 75-seat client and a 500-seat client. Compare per-seat, per-client and bundled-suite pricing, including minimums, annual terms, true-ups, implementation fees, reporting add-ons, API access and premium content.
Published prices change and can be region-specific. Cyber Aware’s comparison page states that it has no seat minimums and publishes per-seat pricing. uSecure’s public page describes per-seat pricing with no minimum licences. KnowBe4’s current public pricing page, checked for this guide, lists AUD monthly per-seat prices on three-year terms starting at 25–50 seats and states that 1,001-plus seats require a quote. Huntress publishes a per-learner price on its site, with tiers and terms that should be checked for the intended client mix.
Do not compare a headline price with a package that includes managed delivery, PSA billing, premium content or additional security products.
Platform comparison
Cyber Aware
Best for: MSPs that want a human-risk service under their own brand, with Australian framework evidence in the same platform.
What its public materials say: Cyber Aware describes a fully branded portal, notification emails, phishing simulations, reports and certificates; per-seat pricing with no minimums; Auto Phish; Essential 8 and SMB1001 mapping; Google Workspace, Microsoft 365, Zapier and direct API integrations. Its security awareness training page describes story-driven training, quizzes, branded completion certificates and learner progress reporting.
Trade-offs: It is a specialist human-risk platform rather than a wider email-security, backup or SOC suite. Cyber Aware is a newer entrant than several established vendors, and its own claims should be validated in a live demo and contract.
Verdict: Buy when a fully branded MSP service, recurring phishing and Australian framework evidence matter more than consolidating products.
uSecure
Best for: MSPs serving clients that want a white-label human-risk platform with no published seat minimum.
What its public materials say: uSecure describes a branded portal, dashboard and reports, per-seat pricing with no minimum licences, central client management and uPhish automated schedules with adaptive campaigns.
Trade-offs: Cyber Aware’s comparison page records no custom domain for the admin or training portal in uSecure’s help-centre material, no public Essential 8 or SMB1001 mapping, no dedicated framework-mapped gap assessment found, and no confirmed Zapier, direct API or PSA integration in the reviewed public sources. Verify these points directly because product pages and contracts change.
Verdict: Consider for EU or UK-focused MSPs that value per-seat simplicity and do not need publicly documented Australian framework mapping.
CyberHoot
Best for: MSPs that want a purpose-built channel platform with quick client setup and multi-tenant visibility.
What its public materials say: CyberHoot describes a multi-tenancy white-labelled solution, brandable certificates, custom logos and colours on communications, unlimited clients from one dashboard and AttackPhish scheduled simulations. Its public materials also describe Entra ID, Google Workspace, SyncroMSP and partner API options.
Trade-offs: The reviewed sources did not confirm a dedicated Essential 8 or SMB1001 gap assessment, custom portal domain or MSP-branded phishing sender. Pricing published by third-party listings is inconsistent and MSP-specific minimums were not confirmed on the public vendor page.
Verdict: Consider when fast channel setup and a familiar MSP workflow beat deep Australian compliance evidence.
Huntress Managed Security Awareness Training
Best for: MSPs already standardised on Huntress that want their campaigns designed and run for them.
What its public materials say: Huntress describes story-based training, a fully managed programme, monthly campaign delivery and Phishing Defense Coaching. Its settings and marketing materials confirm co-branded notifications, certificates and reports, while the service sits alongside a broader Huntress platform.
Trade-offs: The reviewed public materials confirm co-branding rather than an MSP-branded portal, custom domain or MSP-branded phishing emails. Pricing tiers and the standard term can be a constraint for clients below the smallest published band. Cyber Aware’s comparison page found no SAT-level Essential 8 or SMB1001 mapping.
Verdict: Buy for MSPs that want zero campaign administration and already sell Huntress; skip if full white-label delivery is the commercial promise.
KnowBe4
Best for: Enterprise-focused MSPs that need a deep content library, mature reporting and broad security-awareness integrations.
What its public materials say: KnowBe4’s current pricing page lists Foundation and Advanced content tiers, 200-plus Foundation pieces, 1,000-plus Advanced pieces, unlimited phishing security tests, reporting, multi-tenant support, API options and multiple integrations. Its branding help article confirms that administrators can add a company logo, logo URL and brand colour to parts of the console, phishing templates, notifications and learner experience.
Trade-offs: The public branding documentation does not describe a fully MSP-branded custom-domain learner portal or every client touchpoint. Cyber Aware’s comparison page records console, template and certificate branding with learners logging into KnowBe4 instances, and notes that deeper in-module branding costs extra with a 1,000-seat minimum. The public pricing page also starts its visible bands at 25 seats on three-year list terms. Confirm the MSP agreement, data location, add-ons and API tier before presenting a total cost.
Verdict: Buy for content depth and enterprise maturity; skip if the requirement is a pure white-label portal with no vendor identity.
Breach Secure Now
Best for: Channel-only MSPs serving large US clients that want security training bundled with broader Microsoft 365, AI adoption and HIPAA-related content.
What its public materials say: The reviewed comparison sources describe a channel model, a white-labelled portal, unlimited-client and per-client programmes, four training pillars and an Employee Secure Score.
Trade-offs: Current pricing was not published in the reviewed sources. Public materials did not itemise branding on phishing emails or certificates and did not show Essential 8 or SMB1001 mapping.
Verdict: Consider for a US-centric client book; skip as the default Australian MSP choice unless the commercial and framework requirements are confirmed.
Terranova Security
Best for: Enterprises that need multilingual content, accessibility and a Fortra-backed awareness programme.
What its public materials say: The reviewed sources describe 40-plus languages, WCAG 2.2 AA accessibility, Cyber Hero Score, Security Awareness Index, partner child environments, partner licensing API and SSO/SCIM integrations.
Trade-offs: The reviewed materials did not confirm white-label portal, phishing-email or certificate branding, published pricing or an ongoing per-client automated cadence after Campaign Manager’s decommissioning. No Essential 8 or SMB1001 mapping was found in the reviewed public materials.
Verdict: Consider for enterprise reach and accessibility; skip for an MSP whose core promise is turnkey white-label delivery.
Hornetsecurity Security Awareness Service
Best for: MSPs already buying the 365 Total Protection suite and wanting awareness inside that bundle.
What its public materials say: The reviewed sources describe an AI-driven Spear Phishing Engine, Employee Security Index, 365 Multi-Tenant Manager and a large MSP/channel footprint.
Trade-offs: The reviewed materials did not itemise white-label training portal, phishing-email or certificate branding. Pricing is bundled rather than published as a standalone awareness rate, and no Essential 8 or SMB1001 mapping was found.
Verdict: Buy only when the wider suite is already the standard; skip as a standalone white-label choice.
Decision matrix
| Platform | Branding depth | Multi-tenant fit | Phishing model | Pricing visibility | Australian framework evidence |
|---|---|---|---|---|---|
| Cyber Aware | Full touchpoint claim | Template clients | Automated annual setup | Published, no minimums | Essential 8 + SMB1001 published |
| uSecure | Portal, dashboard and reports | Central client dashboard | Automated schedules | Published, no minimums | Not found in reviewed public sources |
| CyberHoot | Communications, logos, certificates | Unlimited clients | Scheduled AttackPhish | Third-party listings; verify MSP terms | Not found in reviewed public sources |
| Huntress SAT | Co-branded touchpoints | Partner platform | Fully managed monthly | Published; tiers and terms apply | Not found at SAT level |
| KnowBe4 | Console, templates, certificates; depth varies | Partner/Multi-Account | Smart Groups and add-ons | Published bands; add-ons and terms apply | Not found in reviewed public sources |
| Breach Secure Now | White-labelled portal claim | Per-client channel model | Cadence not fully itemised | Not published in reviewed sources | Not found |
| Terranova Security | Not confirmed | Partner child environments | Tournament and remediation; cadence verify | Quote-based | Not found |
| Hornetsecurity | Wider suite white-label; training depth not confirmed | 365 tenant manager | Spear Phishing Engine | Bundled | Not found |
The matrix is a buying shortlist, not a substitute for a demonstration. Any “not found” entry means the reviewed public materials did not verify the claim; it does not prove the feature is unavailable.
What to ask in an MSP vendor demo
Use this script and ask the vendor to show the result, not just describe it:
- Create a client from a template and apply a different brand, sender identity and reporting schedule.
- Show the client portal, learner view, phishing email, landing page, report button, certificate and PDF export.
- Filter results to one client, then prove another client cannot see them.
- Set up a recurring campaign with a second scenario and show what happens after a click or report.
- Demonstrate client offboarding, user deletion, seat changes and data export.
- Show the Essential 8 or SMB1001 control mapping if it is part of the proposal.
- Quote a 15-seat, 75-seat and 500-seat client, including terms, add-ons, minimums and support.
- Confirm data location, sub-processors, API limits, SSO/SCIM and PSA integrations in writing.
How to package the service
An MSP should sell an outcome rather than an app login. A practical package includes enrolment and identity sync, a baseline training campaign, monthly or quarterly phishing, follow-up coaching, a client-ready report and a quarterly review of the next human-risk action.
Give clients a written scope: what the MSP manages, what the client must approve, how simulations are communicated, who receives high-risk alerts, how exceptions are handled and what happens when a user joins or leaves.
Use an Essential 8 gap assessment where the client needs a broader Australian control baseline, and use phishing simulations to practise the decisions that email security cannot teach by itself.
What to avoid
- Calling a logo upload full white-label. Check the portal, emails, landing pages, reports and certificates.
- Selling “automated” as “managed”. A schedule that exists is not the same as a team reviewing results and coaching clients.
- Comparing list prices without terms. Minimum seats, annual commitments, add-ons and true-ups can change the margin.
- Promising framework compliance without evidence. Ask for the mapping and export.
- Ignoring small clients. A platform that works for 500 seats may be unprofitable or unavailable for a 15-seat customer.
- Leaving client separation to trust. Test tenant permissions and reporting filters in the demo.
FAQ
What is the best white-label security awareness platform for MSPs?
For an Australian MSP that needs the entire client experience under its own brand, Cyber Aware is the strongest fit in this reviewed shortlist because its public materials claim branding across the portal, notifications, phishing, reports and certificates, alongside published Essential 8 and SMB1001 mapping. Validate the scope, pricing and support terms in a live demo.
Is uSecure fully white label?
Its public materials describe a branded portal, dashboard and reports, but the reviewed comparison material did not confirm a custom domain for the admin or training portal or branding across every touchpoint. Treat it as a partial or verify-in-demo option until the contract says otherwise.
Does KnowBe4 support custom branding?
Yes, its public help material confirms logo, logo URL and brand-colour customisation in specified console, template, notification and learner-experience areas. That is not automatically the same as a fully MSP-branded custom-domain platform, so check the MSP package and any additional branding fees.
Which platform is easiest for multi-client management?
Cyber Aware, uSecure, CyberHoot, Huntress and KnowBe4 all publish multi-client or partner-management capabilities in the reviewed sources, but they use different models. Ask each vendor to create a client, apply a template, run a campaign and export a single-client report during the demo.
What should an Australian MSP check for Essential 8 support?
Ask for the control mapping, evidence fields, gap-assessment workflow, report export and ownership of remediation actions. Do not accept a general “compliance-ready” label as proof of Essential 8 coverage.
What is the difference between co-branding and white-labeling?
Co-branding leaves the underlying vendor visible alongside the MSP. White-labeling aims to make the MSP the visible service provider across the portal, emails, simulations, reports and certificates. Vendors often support some touchpoints but not all.
Can MSPs make recurring revenue from security awareness training?
Yes. Package enrolment, recurring lessons, phishing simulations, coaching and QBR reporting into the managed-service agreement. Model the margin against actual client seat counts, campaign administration and support time rather than relying on a headline licence rate.
Final verdict
If full custom branding is the commercial requirement, shortlist Cyber Aware first, then test uSecure and CyberHoot for the exact touchpoints clients will see. Choose Huntress when managed delivery and suite alignment outweigh white-label depth; choose KnowBe4 when content breadth and enterprise maturity outweigh the need for a vendor-free learner experience.
Related guides
- Security awareness training
- Phishing simulations
- Cyber security gap assessment
- Human risk reporting
- Compare security awareness platforms
Sources
- Cyber Aware platform comparison, checked for this article in August 2026.
- Cyber Aware security awareness training, checked for this article in August 2026.
- Cyber Aware human risk reporting, checked for this article in August 2026.
- KnowBe4 security awareness training pricing, checked in August 2026.
- KnowBe4 account customisation, checked in August 2026.
- uSecure for MSPs, checked in August 2026.
- uSecure pricing, checked in August 2026.
- CyberHoot for MSPs, checked in August 2026.
- Huntress security awareness training, checked in August 2026.
One last thing
The platform with the strongest feature list is not automatically the platform with the strongest MSP business model. Put the client-facing journey, the smallest client, the monthly campaign workload and the QBR report in the same demo. The right choice is the one that lets the MSP deliver a credible service repeatedly without hiding vendor gaps behind a logo.