Moxso

• Organizations that require extensive, publicly accessible security documentation (SOC 2, ISO certificates, third-party audit reports) before procurement.
• Organizations that need a very large off-the-shelf content library in many languages with documented third-party content partnerships.
• Organizations that require confirmed deep IAM automation (SCIM) and robust SOC/SIEM/SOAR integrations documented publicly.

• Limited public security and compliance transparency: no clearly accessible trust center page with certification artifacts was found in the captured official sources.
• Sparse independent reviews on major review platforms reduce available third-party validation of day-to-day UX and support quality.
• Outcome claims in case studies often emphasize click-rate improvements without disclosing measurement methodology, sample sizes, or long-term durability.

• No detailed public product roadmap was found in the captured sources. Buyers should request roadmap details and feature timelines during vendor evaluation.

• The vendor describes individualized simulation frequency guided by observed user behavior.
• The vendor emphasizes a vendor-managed administration model intended to reduce internal administrative tasks.
• The Outlook add-in provides an in-email reporting workflow for suspected phishing.

• Established vendors often offer a broader ecosystem of integrations, larger and frequently refreshed content catalogs, and more extensive public procurement artifacts (SOC 2 reports, trust centers, analyst coverage).

The vendor publishes testimonials and named customer cases on its site. One vendor-published testimonial attributed to Anders van Dhürbourgh-Jacobsen, CFO, Damvad Analytics, indicates that after several months the organization observed improved employee behaviors related to cybersecurity and selected Moxso for its outsourced administration model. (This is a vendor-sourced customer statement.)

• Reported reduction in phishing click rates over time for named customers.
• Automation that the vendor states reduces internal IT workload through vendor-managed campaigns and triage.
• Consolidation of training and simulations with GDPR-related training to reduce tool sprawl.

• Preference for a vendor-managed approach that shifts administrative tasks to the vendor.
• Interest in vendor-described adaptive or risk-based training rather than uniform campaigns.
• Use of an Outlook-based phishing reporting workflow integrated into user email clients.

Independent review coverage is sparse, so churn reasons are not well documented. Plausible churn triggers, based on the category, include dissatisfaction with content localization or freshness, insufficient integrations (HRIS, IAM/SCIM, SIEM/SOAR), pricing changes as employee counts grow, and internal resistance to continuous simulation programs.

Based on positioning and case examples (e.g., customers with ~180 and ~1,700 employees cited in vendor materials):

• Likely ICP: 200,000+ employees (mid-market), with potential fit for larger enterprises, particularly in Europe.

• Energy and utilities (NRGi case)
• Industrial/manufacturing (Sealing System case)
• General B2B organizations exposed to phishing and social engineering risks

• Decision makers: CIO, CISO, Head of IT/Security, GRC/Compliance leaders
• Influencers: HR/Learning & Development for compliance training administration
• End users: all employees, with emphasis on identified high-risk cohorts

• Organizations seeking a continuous awareness program rather than annual-only training.
• Organizations that prefer an external vendor-managed administration model to reduce internal administrative effort.
• Organizations that want Outlook-based phishing reporting integrated into user workflows.
• Organizations willing to validate vendor-described "adaptive" features via pilot metrics and technical evaluation.

• Primary buyers: security leadership / IT, plus compliance and HR stakeholders who oversee mandatory training.
• Likely fit: mid-market to enterprise, particularly organizations seeking a vendor-managed simulation/training program to reduce internal administrative effort (vendor claims reduced internal administration).
• Regional traction: Denmark-headquartered with references to activity in the Nordics and broader Europe.