Watchword is flat-priced, MSP-native phishing simulation and security-awareness training software for SMBs and MSPs in the USA and Canada. It combines a phishing simulator, a training LMS with verifiable certificates, bring-your-own-key AI content, a behavioral Human Risk Score, and built-in compliance evidence — with a free tier and no credit card.

Is there a free version of Watchword?

Yes. The free tier includes the full training library, quizzes, and certificates plus one simulated phishing campaign per month for up to 15 active users, with no credit card and no sales call.

How is Watchword different from KnowBe4?

Watchword matches the cheap tools on price (free, then $1.25/user/mo, no 25-user minimum) and beats the expensive ones on capability: bring-your-own-key AI content with no markup, true MSP multi-tenancy, behavioral risk scoring, compliance evidence output, and boolean-only capture that never stores a typed password.

Does Watchword work for MSPs?

Yes. Watchword is MSP-native: one console over unlimited client tenants, per-client campaigns and branding, white-label reports, a cross-client risk board, partner pricing from $0.80/user/mo, and a free NFR tenant for your own team.

Watchword — Phishing Simulation & Security Awareness Training for SMBs & MSPs

One tool. The whole human-risk job.

The cheap tools are thin on AI and compliance; the expensive ones are priced for a security team you don't have. Watchword takes the cheap price and the expensive capability.

🎣

Phishing simulator

An 80-category template library, per-learner lure variants, a compose/preview/schedule flow, and a results dashboard tracking sent / open / click / submit / report. Send safely: a domain-auth gate plus DNS-TXT domain proof means we never send to a domain you haven't proven you control. We never store a typed password — captures are boolean.

🎓

Training LMS

Real micro-lessons with quizzes, completion tracking, and verifiable certificates across phishing, passwords/MFA, BEC, ransomware, data handling, and social engineering. Auto-enroll clickers in remedial training.

✨

BYO-key AI content

Generate fresh lures and lessons with your own LLM key — no inference markup, ever. An abuse fence keeps generated content a teaching tool, never a real credential thief.

🏢

One-pane MSP multi-tenancy

Run every client from one console — switch clients with no re-login, triage a cross-client risk board, hand out white-label reports in each client's own brand. Strict per-tenant isolation keeps one client's data out of another's. The depth usecure customers say is broken — built in.

📊

Behavioral Human Risk Score

A per-person 0–100 score from what people actually do in sims — submit, click, clean-open, report — not just quiz completions. Reporting a phish lowers the score, the way it should. Bands flag who to coach first.

🛡️

Compliance evidence

Every completion and sim result auto-maps to HIPAA AT, NIST 800-171 3.2.x, SOC 2 CC2, PCI 12.6, and ISO A.6.3, then flows into the Sightline / Bastion / Ward evidence graph. No screenshots.

Watch the click drop in real time

A campaign dashboard that reads like a beacon: the phish caught, the people coached, the trend bending down.

◬ phish caught

120

Sent

Opened

Clicked

Submitted

Reported

Try the real, interactive version in the free app — it runs entirely in your browser.

How we stack up

Match the cheap tools on price. Beat the expensive ones on features.

	KnowBe4	Hoxhunt	usecure	CanIPhish	Watchword
Entry price	$1.50–3.75/user/mo	$12–18/user/yr	$2–3.50/user/mo	Free ≤10, then $0.80–2	Free, then $1.25/user/mo
Real cost to start	25-user min	~$10k/yr floor	monthly	self-serve	$0 up to 15 users
BYO-key AI content (no markup)	✗	metered	limited	✗	✓
True MSP multi-tenancy	add-on	enterprise	"handles poorly"	partial	✓ built-in
Compliance evidence output	✗	✗	✗	✗	✓ suite graph
Human Risk Score	completions only	✓	rigid reports	✗	✓
No password ever stored	—	—	—	—	✓ boolean capture

Pricing from public sources, 2025–2026. See the full pricing comparison, the KnowBe4 comparison and CanIPhish comparison, or start with a free phishing simulation.

Built for the MSP pane of glass

One console, every client

Switch client context in a click — no re-login. Run per-client campaigns, hand each client a white-label report in their own brand, and triage a cross-client risk board that aggregates phish-prone %, high-risk people, and overdue training across your whole book. Strict per-tenant isolation; a free NFR tenant for your own team.

See the MSP model →

Partner economics that work

Buy at $0.80–$1.50/user/mo on sliding volume, set your own sell price and margin, and bill it through your PSA. The price of the cheap tools, the capability of the expensive ones.