Most people don’t remember the last cybersecurity awareness video they watched. Not because it was bad, but because it was forgettable. Too much training feels like homework—boring, easy homework at that—which means end users don’t remember it. And if they don’t remember it, their behaviour doesn’t change. This is supposed to be the whole point of cybersecurity awareness training, rather than just keeping insurance companies and regulators happy.

For MSPs, this becomes even more painful. You’re judged on your ability to reduce risk for dozens of clients at once. If the content is dull, you get the angry phone call when someone clicks on a fake invoice.

The challenge is simple: training must be engaging enough that users actually take part and short enough that they don’t fight it. It has to create learning moments rather than frustration and brain fog.

You want training that makes people say “We’re loving Phin and the set-it-and-forget-it nature of the platform. Our end-users really enjoy the training content.”

Compliance is important. Cyber insurance requirements are important. Auditors are important, in their own way. But compliance is only one layer of protection. The real metric that matters is whether users behave differently after training. Do they slow down before clicking? Do they spot the weird grammar in a phishing email? Do they question the CEO who suddenly messages them about gift cards or an urgent job?

Behavioral change is the key. You get there with content that teaches something useful in a way that sticks.

6 Security Awareness Training Content Providers that will Change User Behavior

These are the six providers who supply all training inside Phin. Phin curates the best content from the best providers. They are different in style, topic, and general vibes, but all share one thing: they care about helping users learn something, not punishing them with a 45-minute lecture on passwords.

Here is the lineup (in no particular order):

1. NINJIO

Fast paced, dramatic, and built for people with short attention spans. Ninjio tells cybersecurity stories using high quality animation with a new episode every month. Think mini episodes that feel binge-worthy.

What they cover: Phishing, social media, information security, passwords, remote working, device security, and more.

Why users like it: Episodes are short and engaging. The story sticks in your head, which means the lesson does too. Like Sesame Street for grown ups.

2. SocialProof Security

People focused, behaviourally smart, and built on real psychology. Co-founded by white-hat hacker/educator Rachel Tobac, SocialProof Security specializes in social engineering and human risk. Their videos use real world stories to show how attackers manipulate trust, emotion, and urgency. They also teach through talks and workshops, often featuring talent from Hamilton, MTV, American Idol, and TikTok.

What they cover: Social engineering (main focus), phishing, ransomware/malware, passwords, social media, MFA.

Why users like it: It feels modern, real, and believable. The content sticks because it’s based on how people actually behave rather than abstract textbook theory.

3. Goldphish

Bright, animated, and perfect for global teams. Goldphish is NCSC-accredited and uses friendly animated characters and bite-sized lessons that simplify complex topics. It is especially strong for teams who prefer visual storytelling and need multiple formats, like video, interactive scroll-throughs, and micro modules.

What they cover: Passwords, phishing, malware, data privacy, secure browsing, physical security, USB risks, and other fundamentals.

Why users like it: Easy to grasp and easy to remember. Nothing feels intimidating. It strikes the balance between helpful and fun.

4. CFISA

Straightforward, clear, and ideal for policy-based organizations. CFISA’s content is clean and direct. No fluff or theatrics. Simple guidance that helps end users understand what to do and why. Certified to meet NIST-800 53 standards by the State of Texas.

What they cover: Compliance, privacy, data protection, security fundamentals, phishing awareness, and incident reporting.

Why users like it: Practical and reassuring. Great for users who want calm, structured training that gets straight to the point.

5. OWASP

Developer heavy, deeply technical, and essential for anyone touching code. OWASP brings technical accuracy to topics that developers, software teams, and product engineers deal with daily. These lessons dig into vulnerabilities and secure coding practices in a way that normal training often avoids. OWASP Foundation relies on volunteers and is available to all. Phin curates the best, most applicable content for you and your clients.

What they cover: Top 10 vulnerabilities including API security, secure coding, injection attacks, access control failures, and other engineering-focused elements.

Why users like it: Clear, authoritative, and respects the audience’s technical skill. Developers get the depth they actually need.

6. Habitu8

Real people, real stories, and real humor. Part of Arctic Wolf since 2021, Habitu8 blends live action and animation into short, relatable training moments with high production values.

What they cover: Password hygiene, phishing, physical security, device security, mobile threats, secure browsing.

Why users like it: Modern and fast. Users come away thinking about the concept rather than the video itself.

What all six providers have in common

High-value training, created by experts in their own lane. Each provider has its own production style—animation, live action, real stories, technical depth, behavioral science. Whatever the style, the goal stays the same: help users recognize threats quickly and act safely.

This variety is why Phin doesn’t create content in-house. Instead, Phin curates the best from multiple partners so MSPs can deliver consistent training that evolves with the threat landscape and ensures that there is something to suit any client. Whatever their initial level of understanding, their preferred method of learning, or their sense of humor—Phin has content that’s fit for purpose.

6 Reasons MSPs Love Training with Phin Security

1. Content variety without the burden of managing content

Most cybersecurity awareness tools give you a small library that loops every year. End users groan because they have seen it before. MSPs groan because they have to manage it. Compliance teams groan because it is the same old stuff. Phin solves this with scale and automation.

2. No repeated content for 15 years

Between six providers, dozens of topics, and constant new releases, you can train every month for more than a decade without repeating anything (although you might want to repeat a few bits, there’s some great stuff).

3. Short training by default

Ninety percent of the entire library takes five minutes or less. Users actually complete it. MSPs get higher compliance rates. No one complains about losing half their morning to a video.

4. Built to change behavior, not tick a box

The variety of tone, format, style, and approach means every user finds something that resonates. For example, one MSP partner, Simplex IT, had a client who handled credit card information. After completing Phin’s PCI DSS training, the company immediately reached out to their bank to find a more secure payment process and implemented it right away—a big win for Simplex IT.

5. Aligned with cyber insurance requirements

Short training delivered monthly helps users stay aware and helps you demonstrate continuous education. That matters for insurers who want to see proof that you’re actively reducing human risk.

6. Designed for MSPs

Auto enrollment. Auto resetting. Auto reporting. Auto everything. When you don’t have to manage campaigns manually, you save hours every month and reduce human error. As Integris put it: “Phin has saved us 70 hours monthly on SAT deployment and management.”

Next Steps for your MSP

Want a deeper dive into Phin’s content library? Start a free trial or book a call! You will see why MSPs stick with Phin for the long haul.