COMPARETerranova Security alternative · For MSPs 

The Terranova Security alternative built for Australian MSPs.

Terranova Security, now part of Fortra, is a long-established enterprise platform, with training content in 40-plus languages and the annual Gone Phishing Tournament as a public benchmark. Cyber Aware does a different job: human-risk programmes MSPs run under their own brand - portal, emails and certificates on your own domain, with Essential 8 and SMB1001 mapped in from day one.

WHY MSPS SWITCH

Where the two platforms part ways.

🏷

A confirmed partner structure, an unconfirmed brand

Terranova Security's own release notes confirm a partner-and-child-environment account structure and a partner-scoped Licensing API that returns every client's licence data in one call. What we didn't find, across that documentation, its Okta and JumpCloud integration listings, or third-party marketplace pages, is a claim that the child environment carries the partner's own logo, colours or domain, or that phishing and notification emails send from the partner's own sender identity. Cyber Aware puts your logo and your own domain across the portal, emails, reports and certificates by default.

💵

Two listings, one quote-only answer

SoftwareSuggest and the SoftwareOne Marketplace both list Terranova Security without a rate card - each routes to a "Get Pricing" or quote request instead, and neither states a seat minimum. Cyber Aware's per-seat rate is the number on the card, with no quote request standing between an MSP and the price.

🧭

Real risk scoring, no framework-mapped assessment

Terranova Security has shipped at least two named risk-scoring tools we found - Cyber Hero Score, announced to translate user risk into personalised training, and the Security Awareness Index (SAI) that appears in current product documentation - both built from participation, quiz and phishing-simulation data. Genuinely sophisticated profiling, but in the materials we could access, neither ties to a named compliance framework's specific controls. Cyber Aware's gap assessments are Essential 8 and SMB1001-mapped and branded to the MSP from the first click.

🇦🇺

Australian framework coverage

Across Terranova Security's own product documentation, its Okta and JumpCloud integration listings, its awards submissions and its marketplace pages, we found no reference to Essential 8 or SMB1001 - the public content we could access emphasises 40+ language localisation and enterprise accessibility standards rather than any Australian framework. Cyber Aware ships mapping and evidence for both Australian frameworks out of the box.

SIDE BY SIDE

Cyber Aware vs Terranova Security at a glance.

DimensionCyber AwareTerranova Security
White-label depthPortal, emails, reports and certificates under your brandPartner/child-environment account structure confirmed in Fortra's own release notes; no branding, custom-domain or sender-identity claim found in the materials we could access
Pricing model & seat minimumsPer-seatNo minimums - pay for seats you useNot publishedCustom quote-based; SoftwareSuggest and SoftwareOne Marketplace listings both route to a quote request with no rate or seat minimum shown
Multi-tenant client managementTemplate clients, per-client brandingPartialPartner accounts operate against child environments, plus a partner Licensing API returning all clients' licence data in one call - per Fortra's own release notes; self-service onboarding/branding not confirmed
Phishing automationAuto Phish: 12 months of campaigns from one chatPartialImmediate remediation (auto-assigns training on a failed simulation, still active per June 2026 release notes) confirmed in Fortra's product docs; the platform's separate Campaign Manager tool was decommissioned in May 2026; ongoing per-client automated cadence beyond the annual Gone Phishing Tournament not confirmed
Gap assessmentsBranded Essential 8 / SMB1001 assessmentsPartialCyber Hero Score and the Security Awareness Index (SAI) profile user/organisational risk from participation and simulation data; not mapped to a named compliance framework in the materials we could access
Australian frameworks (Essential 8, SMB1001)Mapped and evidenced out of the boxNo mapping found in the product, integration or partner documentation we could access
IntegrationsGoogle Workspace, Microsoft 365, Zapier, APIPartialSSO/SCIM confirmed with Okta, JumpCloud and Azure AD, plus a partner-scoped Licensing API (bearer-token, licence data only); no Zapier, general-purpose API or named PSA integration confirmed
Last verified July 2026. “—” means the vendor does not publish this information.
IN DEPTH

Multilingual content and accessibility: Terranova's clearest strength

Two independent listings we fetched agree on the same headline number: Terranova Security's training content is "translated in 40+ languages," per both its Cybersecurity Excellence Awards submission and its SoftwareOne Marketplace listing. The awards submission goes further, describing the content as "diverse, global, and accessible," built to accessibility standards "A, AA, WCAG 2.1" as of its 2024 submission - and Fortra's own June 2026 release notes (version 1.128) show the platform has since moved further, with improvements made "to maintain WCAG 2.2 AA compliance and enhance overall accessibility."

That's a genuine, well-evidenced differentiator for any organisation training a workforce spread across many countries and languages in a single campaign - a different kind of depth than Cyber Aware offers.

Cyber Aware's depth runs the other direction: rather than breadth of language, it maps directly to Essential 8 and SMB1001, branded to the MSP, for clients being audited against Australian frameworks specifically.

IN DEPTH

Phishing and risk scoring: a real benchmark, no framework map

Terranova Security's most visible phishing asset is the annual Gone Phishing Tournament - a free, industry-wide benchmark co-sponsored with Microsoft. The 2023 edition, per Terranova's own press release distributed on PRWeb, deployed more than 1.37 million simulated phishing emails to participants at nearly 300 organisations between October 9-27, 2023. Results showed a 10.4% click-through rate (up 3.4 points year-on-year) and a 6.5% password-submission rate among those who clicked, with education the highest-risk sector (16.8% click-through) and finance the lowest (6.2%). A separate Technology Record article confirms Microsoft co-sponsors the event and that participants can "benchmark their performance against peers" by industry, region and size.

Day-to-day, Fortra's own release notes describe "immediate remediation" that automatically assigns follow-up courses to users who fail a simulation - genuine in-product automation, still referenced as recently as June 2026, distinct from the once-a-year tournament. A separate orchestration tool, Campaign Manager, existed earlier in the platform but was "fully decommissioned" in May 2026 (version 1.126), per Fortra's own release notes - a reminder that feature sets in this category shift, and worth confirming directly before relying on any specific tool name. Terranova also announced a partnership with Elevate Security, per a PRNewswire release, adding risk scoring that identifies users behind "4% of users causing 80% of phishing incidents" for more targeted enrolment.

On risk scoring specifically, we found two named tools: Cyber Hero Score, announced via a Newswire press release as a rating built from role, access, knowledge, breach proximity and behavioural data, and the Security Awareness Index (SAI) that appears in Terranova's current product documentation and release notes. Both are genuinely sophisticated profiling tools - neither, in the materials we could access, is described as mapped to a named compliance framework's specific controls.

Cyber Aware's Auto Phish generates a full year of varied phishing campaigns from a single setup conversation, and its gap assessments map directly to Essential 8 and SMB1001 controls from the first report.

IN DEPTH

Multi-tenancy and partner access: a confirmed structure, an unconfirmed brand

Fortra's own release notes for the product - published on its hstechdocs technical documentation site - describe a real partner account structure. A February 2025 entry notes that "partners accessing a child environment with ContentHub Read-Only enabled will no longer be able to add content to the library," confirming partners operate against client-specific child environments with differentiated permissions. A May 2024 entry describes a Partner Licensing API: partners can retrieve every client's licence information "with just one API call, authenticated using a bearer token" - previously a separate call per client.

That's a genuine multi-client structure for partners managing several accounts. What we didn't find, across 18 months of release notes and Terranova's integration listings, is any claim that a partner's child environment carries the partner's own logo, colours or domain, or that client-facing emails send from the partner's own identity rather than Terranova's. Terranova Security's own marketing site blocks automated access, so MSPs evaluating this specifically should confirm branding depth directly with Terranova.

Cyber Aware's multi-tenant management is built around template clients with per-client branding from the start - no separate branding confirmation required.

IN DEPTH

Pricing: two listings, one quote-only answer

Neither third-party listing we could access publishes a Terranova Security rate. SoftwareSuggest lists 20 product features and a "Get Pricing" call to action, with no numbers attached - the listing also notes Terranova "has not yet claimed its profile," alongside a separately-noted "Market Leader 2025" award. The SoftwareOne Marketplace listing is the same shape: a full feature description - 40+ languages, customisable phishing templates, gamification, mobile-responsive delivery - with commercial terms left to a direct vendor conversation.

Neither listing states a seat minimum, an MSP-specific tier structure, or a discount schedule. For an MSP trying to model per-client economics before a sales call, that leaves pricing as the one input still missing.

Cyber Aware publishes one per-seat rate with no seat minimums and no quote-request form standing between an MSP and the number.

FAIR SHAKE

When Terranova Security might be the better fit

  • Want a platform backed by an established enterprise cybersecurity portfolio - Terranova Security has operated in the category for more than 20 years and became part of Fortra in 2022, with the product still under active development (version 1.128.2 shipped in July 2026, per Fortra's own release notes).
  • Train a genuinely global, multilingual workforce - Terranova Security's content is translated into 40+ languages and built to WCAG 2.2 AA accessibility standards, a real advantage for enterprises running one campaign across many countries at once.
  • Want a free, credible industry benchmark to point to - the annual Gone Phishing Tournament, co-sponsored with Microsoft, lets any organisation compare its phishing-simulation results against peers by industry, region and size, with results published in a public report each year.
  • Already operate as a multi-client partner needing programmatic licence visibility - Terranova Security's partner Licensing API returns every client's licence data in a single authenticated call, a genuine efficiency gain over checking accounts one at a time.
QUESTIONS

Frequently asked

Is Cyber Aware a white-label alternative to Terranova Security?

Yes. Cyber Aware is built specifically for MSPs to run training, phishing simulations and gap assessments under their own brand - portal, emails, reports and certificates all carry the MSP's own logo and domain, not Cyber Aware's.

Does Terranova Security offer white-label branding for MSPs?

We couldn't confirm this in the materials we could access. Fortra's own release notes for Terranova Security confirm a partner-and-child-environment account structure and a partner-scoped Licensing API, but we found no claim - in that documentation, its Okta or JumpCloud integration listings, or third-party marketplace pages - that the child environment carries the partner's own logo, domain or sender identity on emails. Terranova Security's own marketing site blocks automated access, so MSPs evaluating white-label depth should confirm directly with Terranova. Cyber Aware carries the MSP's own domain across the portal, emails, reports and certificates.

What does switching from Terranova Security to Cyber Aware involve?

Most MSPs import client and end-user lists, apply the MSP's branding and own domain to the portal and templates, and schedule the first phishing and training campaigns - typically a same-day setup with a published per-seat rate and no minimums to plan around.

Does Terranova Security support Essential 8 or SMB1001 for Australian businesses?

We found no public reference to Essential 8 or SMB1001 in any Terranova Security material we could access as of July 2026 - product documentation, integration listings, awards submissions and marketplace pages all emphasise 40+ language localisation and global enterprise accessibility rather than any Australian framework. MSPs serving Australian clients should confirm current framework support directly with Terranova. Cyber Aware maps and evidences both Australian frameworks out of the box.

How does Terranova Security price its platform?

Terranova Security doesn't publish pricing in the materials we could access. Two independent third-party listings - SoftwareSuggest and the SoftwareOne Marketplace - both route buyers to a quote request rather than a rate card, and neither lists a seat minimum. Cyber Aware publishes a single per-seat rate with no seat minimums.

Does Terranova Security integrate with SSO and directory tools?

Yes. Terranova Security's own integration listings and release notes confirm SAML/OIDC single sign-on and SCIM or directory-sync provisioning with Okta, JumpCloud and Azure AD, plus a partner-scoped Licensing API. We found no public confirmation of a Zapier integration, a general-purpose public API, or a named PSA integration (ConnectWise, Autotask) as of July 2026. Cyber Aware supports Google Workspace, Microsoft 365, Zapier and a direct API.

Sources

See it live

Same platform.
Your brand.

Spin up a fully branded portal and compare it with Terranova Security yourself - live, before you finish your coffee.