Curated Supplier · Security Awareness · Phishing Simulation

Stickley on Security — training people actually pay attention to.

Security awareness training and phishing simulation specialist since 2007 — founded by noted security expert Jim Stickley (NBC, CNN, CNBC, LifeLock commercials). Powered Cybersecurity Training (PCT) and BadPhish phishing simulator with FFIEC-mandate alignment for financial services. Over 150,000 users protected nationwide. Sub-$500 MRR floor.

What Stickley on Security actually does.

Stickley on Security has been running awareness training and phishing simulation since 2007 — long enough to have learned what works and what doesn't. The pitch isn't "check the awareness training box for your auditor"; it's that nearly every breach traces back to someone clicking something, and the difference between content that gets clicked through and content that actually changes behavior is real. Jim Stickley spends time breaking into organizations for a living — the training material is informed by what actually works on people, not academic theory about adult learning.

Capabilities · A short list

Who this fits.

Best Fit

SMB IT/security lead needing turnkey awareness program

You know awareness training matters, you don't have time to design and run a program, you need something that runs automatically with minimal management overhead. PCT was built for this.

Strong Fit

Banks, credit unions, and other FFIEC-regulated orgs

FFIEC alignment is the lead story. Customer-facing security education plus employee training under one provider.

Mixed Fit

Enterprises with existing KnowBe4 / Proofpoint deployment

Switching costs are real once a program is established. Brief Stickley when you're refreshing your awareness program or expanding beyond standard offerings.

Less Likely

Pure technical security teams without awareness mandate

If you don't have a regulatory or insurance requirement and you're not measuring phishing susceptibility, the ROI is harder to quantify.

How Stickley on Security sits against the field.

This page

Stickley on Security

  • Security awareness training + phishing simulation
  • Founded 2007 — long industry presence
  • FFIEC-aligned for financial services
  • Powered Cybersecurity Training fully managed
  • Strong fit: SMB / FFIEC-regulated organizations
Adjacent

Cyrisma

  • Data-layer security and discovery
  • Different layer — technical, not human
  • Often complementary in mature programs
  • Available through our sourcing network
  • Both belong in well-rounded security stacks
Different shape

Drata

  • Compliance automation tooling
  • Different problem entirely
  • Drata may consume Stickley's training records
  • Often deployed together
  • Available through our sourcing network

Brief us. We'll get Stickley on Security's SE to quote with your context loaded.

Start a sourcing brief →